The Basic Outcomes of Information Security Governance Should Include All

question 33

Multiple Choice

The basic outcomes of information security governance should include all but which of the following?

• A) Value delivery by optimizing information security investments in support of organizational objectives
• B) Performance measurement by measuring, monitoring, and reporting information security governance metrics to ensure that organizational objectives are achieved
• C) Resource management by executing appropriate measures to manage and mitigate risks to information technologies
• D) Resource management by utilizing information security knowledge and infrastructure efficiently and effectively

---

Definitions:

Data

Factual information used as a basis for reasoning, discussion, or calculation, often in the form of numbers or qualitative insights.

Vague Referrals

Indirect or unspecified mentions or allusions to subjects or objects, often lacking clear details.

Media

Various means of communication and dissemination of information, including television, radio, newspapers, and the internet.

Violence

Violence is the use of physical force or power to cause harm, injury, or abuse, whether against individuals or groups.