Which of the following is critical in creating a security program aligned with an organization's goals?

As the new CISO at the company you are reviewing the audit reporting process and notice that it includes only detailed technical diagrams. What else should be in the reporting process?

The Information Security Governance program MUST:

Which of the following is MOST useful when developing a business case for security initiatives?

When briefing senior management on the creation of a governance process, the MOST important aspect should be: