Question 136:
In addition to business alignment and security ownership, which of the following is MOST critical for information security governance?
Answer options:
A. Auditability of systems B. Compliance with policies C. Reporting of security metrics D. Executive sponsorship