An organisation runs its security governance as a separate structure with its own committees, reporting…

Question

An organisation runs its security governance as a separate structure with its own committees, reporting lines and calendar, parallel to corporate governance. Which CISM task is not being fulfilled?

Accepted Answer

D. Integrating information security governance into corporate governance — CISM names integrating information security governance into corporate governance as a supporting task, so a parallel structure that never joins the corporate one leaves that task undone.

Answer

Establishing security policies to guide standards

Answer

Developing business cases for security investment

Answer

Establishing an information security governance framework