Answer is D. Engage business process owners. Because alignment means that the security program supports and enables the business, rather than being a separate or disconnected function. To truly understand if your security objectives align with business goals, you need input from the process owners.
KPIs measure performance, but not necessarily strategic alignment, unless those KPIs are built around business value which again is provided by the process owner.
The question asks about the most EFFECTIVE way. KPI's are aligned with the business objectives and by reviewing them, the security manager can quickly assess the business alignment.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
SHERLOCKAWS
2 days, 21 hours agoJosef4CISM
2 months, 1 week agomdmdmd
2 months, 4 weeks agoServerBrain
5 months, 2 weeks ago