Which of the following is the MOST important input to the development of an effective information security strategy?

A. Well-defined security policies and procedures

B. Current and desired state of security

C. Business processes and requirements

D. Risk and business impact assessments








 

Suggested Answer: B



This question is in CISM exam 
For getting Certified Information Security Manager Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to ISACA.