Exam CISM topic 1 question 1151 discussion

I answered C, but after looking up maturity models and realizing this was a case of answer written wrongly, I find A is the correct answer. C is written wrong "Alignment of the vendor's business objectives with enterprise security goals" Should be "Alignment of the vendor's security goals with Enterprise Business Objectives" Maturity of internal controls is highly important, look up maturity models. Could be me, but this seems to be the first quesiton that seemed like a trick question if you didnt properly read it. Please correct me if I am wrong.

C - alignment with corporate governance goal

C alignment with corporate governance goal

C- helps you select a vendor that matches your business requirements. In the absence of 'C' option 'A' is useless.

Alignment of vendors business objectives with enterprise goals.

C. Alignment of the vendor's business objectives with enterprise security goals When selecting a third-party vendor to provide security services, it is crucial to ensure that their business objectives align with the enterprise's security goals. This alignment ensures that the vendor's services and solutions will effectively support the enterprise's information security program.