Exam CISM topic 1 question 25 discussion

Clear and understandable information security objectives are crucial for effective communication and alignment with stakeholders. When objectives are transparent and easily comprehensible, they facilitate better understanding and buy-in from various stakeholders, including employees, management, and other relevant parties. Clarity in objectives helps ensure that everyone involved understands the goals and expectations related to information security, fostering a more cohesive and focused security culture within the organization. While the other options (regular reassessment and reporting, approval by the IT governance function, and identification using global security frameworks and standards) are important aspects of managing information security, clarity and understanding by stakeholders are foundational for successful implementation and support.

It's important to have the ability of evaluating your performance

C. They are clear and can be understood by stakeholders

The keyword is "developing" when looking at the answers here is what I noticed: (A) This happens after development so it is wrong (B) While important, governance doesn't trump the stakeholders. (C) This is the correct answer (D) Global security frameworks may or may not apply to the org. As a result this isn't a particularly strong answer So the answer is C

The need to be clear to stakeholders (aka leadership)

C and B