Exam CISM topic 1 question 851 discussion

The PRIMARY objective of integrating information security governance into corporate governance is to adequately safeguard the business in achieving its mission. Therefore, option C?

My answer is C. the ultimate goal is to protect the organization’s mission-critical assets and support its overall objectives. whereas the Option D, is important too, but it is more of a means to an end rather than the primary objective.

It's C. answer D does not makes sense to me...

C. To adequately safeguard the business in achieving its mission. While aligning security goals with the information security program (Option A), ensuring the business supports information security goals (Option B), and obtaining management commitment for sustaining the security program (Option D) are important aspects of information security governance, the overarching goal is to ensure that information security measures are in place to protect the business and its mission. This includes safeguarding the organization's assets, data, and operations from security threats and risks.

The PRIMARY objective of integrating information security governance into corporate governance is C. To adequately safeguard the business in achieving its mission. Integrating information security governance into corporate governance aims to ensure that information security is effectively aligned with the overall objectives and mission of the organization. The primary focus is on safeguarding the business and its assets from potential security risks and threats.

C. To adequately safeguard the business in achieving its mission

Agree with C

I agree it's C