Exam CISM topic 1 question 1010 discussion

D - Management objectives provide the strategic direction and goals for the information security program. They ensure that the policy aligns with the organization’s overall business objectives and priorities.

Management objectives should be integrated with the policy.

D. Management objectives....policy generally focuses on the goals and objectives of management.

Policy should communicate management intent.

The MOST important to include in an information security policy is C. Best practices. While all the options listed can be relevant to an information security policy, best practices play a crucial role in ensuring the security of information assets. Best practices refer to industry-recognized guidelines, standards, and procedures that are considered effective in protecting information and mitigating risks. Including best practices in an information security policy helps establish a baseline for security measures and provides clear guidance on the recommended actions and controls that should be implemented. It ensures that the organization follows proven methods and approaches to safeguard its information assets.

D. Management objectives

best practices most important