Exam CISM topic 1 question 1001 discussion

The correct answer is A. Choosing D would be a big and fat incorrect answer as implies the opposite. Information strategy should be aligned to business not the other way around.

The alignment ensures that information security initiatives support the overall business objectives and strategic goals of the organization.

Option A

A is correct, D is opposite to what needs to be acheived.

Option D, "Executive management's strategy is aligned to the information security strategy," is generally considered to be the most significant benefit. When executive management's strategy is aligned with the information security strategy, it signifies a high level of commitment to information security throughout the organization. This alignment ensures that information security is integrated into the organization's overall business strategy and decision-making processes. It also demonstrates that information security is viewed as a critical component of the organization's success and not just an isolated function. By aligning executive management's strategy with information security, several positive outcomes can be achieved.

D. Executive management's strategy is aligned to the information security strategy.

The greatest benefit of effective information security governance is D. Executive management's strategy is aligned to the information security strategy. When executive management's strategy is aligned with the information security strategy, it ensures that information security is given the necessary attention and resources it requires. This alignment allows for effective decision-making and implementation of security measures throughout the organization. It also ensures that the organization's overall goals and objectives are in line with its information security initiatives, leading to a stronger and more resilient security posture.

A. Treatment priorities are based on risk exposure.

Never be D as it should be other way.

Between A and D, I'd say D. Though I'd say like to say IS is aligned to ES, rather than ES being aligned to IS.