Question

A newly appointed information security manager has completed an approved security strategy that includes defined objectives and initiatives with allocated budget. Six months into execution, the executive sponsor asks how the manager will demonstrate that the strategy is actually moving the organization toward its intended security posture over time. Which of the following is the MOST effective way to provide this assurance?

Accepted Answer

Track key goal indicators and outcome metrics against the defined target state at regular intervals

Answer

Report the percentage of initiative milestones completed on schedule and within budget

Answer

Provide the number of security incidents detected and resolved each month

Answer

Compile the count of policies published and staff trained since strategy approval