Which of the following would BEST demonstrate the status of an organization's information security program to the board of directors?

A. The information security operations matrix

B. Changes to information security risks

C. Information security program metrics

D. Results of a recent external audit








 

Suggested Answer: D



This question is in CISM exam 
For getting Certified Information Security Manager Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to ISACA.