Exam CISM topic 1 question 36 discussion

The composition of the committee includes the CIO, the IT shared services manager, the information security manager, and the vice president of marketing. While the CIO and IT shared services manager represent the IT function, and the information security manager represents security, having only the vice president of marketing as a representative from the business may not provide sufficient business representation. A more balanced and comprehensive steering committee would typically include key stakeholders from various business units to ensure that information security decisions align with overall business objectives. While the other options may have some relevance, the lack of sufficient business representation is generally a more critical concern for the effectiveness and holistic alignment of the information security steering committee with the organization's overall goals.

B To address this issue, the organization should consider expanding the committee's membership to include more representatives from various business units, ensuring that a wider range of business interests and perspectives are taken into account when making information security decisions. This can help improve alignment between information security efforts and the organization's overall business objectives.

B. The committee lacks sufficient business representation.

Yessirre! B. The committee lacks sufficient business representation.