Exam CISA topic 1 question 1124 discussion

While user accountability, alignment of information security with IT objectives, and integration of business and information security are important aspects of a robust information security program, without strong commitment and support from top management, it is challenging to implement and sustain effective security measures. Management's commitment ensures the allocation of resources, support for policies and procedures, and a culture of security throughout the organization.

Alignment of information security with IT objectives: Alignment with IT objectives is important for ensuring that information security is integrated into the organization's technology infrastructure. However, again, without management commitment, the security program may not receive the necessary resources and support to succeed. Management's commitment to information security: Management's commitment to information security is critical because it sets the tone for the entire organization. When management is committed to security, they allocate sufficient resources, budget, personnel, and attention to ensure the security program's success. They also set expectations for employees, encouraging them to prioritize security and hold them accountable for their actions.

D. Management’s commitment to information security

Answer C