Discuss Isaca CISA Exam Topic 2 Question 112

Which of the following is MOST critical to the success of an information security program?

AManagement's commitment to information security

BUser accountability for information security

CAlignment of information security with IT objectives

DIntegration of business and information security

Suggested Answer: A

The most critical factor for the success of an information security program is management's commitment to information security. Management's commitment to information security means that the senior management supports, sponsors, funds, monitors and enforces the information security program within the organization. Management's commitment to information security also demonstrates leadership, sets the tone and culture, and establishes the strategic direction and objectives for information security. User accountability for information security, alignment of information security with IT objectives, and integration of business and information security are also important factors for the success of an information security program, but they are not as critical as management's commitment to information security, as they depend on or derive from it.Reference:Info Technology and Systems Resources | COBIT, Risk, Governance ... - ISACA,IT Governance and Process Maturity

Get Premium CISA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Bok 3 months ago

But what about A? If security isn't aligned with IT, it won't be effective either.

Lewis 3 months ago

I agree with Christene. Management sets the tone for the whole program.

Christene 3 months ago

I think B is the most critical. Without management's commitment, nothing will work.

William 3 months ago

Surprised this isn’t all about management commitment!

Delisa 3 months ago

User accountability is key, but it’s tough to enforce.

Tracie 4 months ago

C makes sense, but can we really integrate them fully?

Casie 5 months ago

I think A is super important too, they need to align.

Tricia 5 months ago

Definitely B, management needs to be on board!

Penney 6 months ago

Integration of business and information security seems essential, but I can't recall if it was highlighted as the top priority in our studies.

Princess 6 months ago

I’m leaning towards option B, but I wonder if user accountability might actually play a bigger role in the long run.

Virgilio 6 months ago

I remember a practice question that emphasized the alignment of security with business goals. It feels like that could be really important too.

Phillip 6 months ago

I think management's commitment to information security is crucial, but I'm not entirely sure if it's the most critical factor.

Isaca CISA Exam - Topic 2 Question 112 Discussion