Information security governance yields significant benefits. List five.

Question

What will be an ideal response?

Answer 1

1. An increase in share value for organizations2. Increased predictability and reduced uncertainty of business operations by lowering information security-related risks to definable and acceptable levels3. Protection from the increasing potential for civil or legal liability as a result of information inaccuracy or the absence of due care4. Optimization of the allocation of limited security resources5. Assurance of effective information security policy and policy compliance6. A firm foundation for efficient and effective risk management, process improvement, and rapid incident response7. A level of assurance that critical decisions are not based on faulty information8. Accountability for safeguarding information during critical business activities, such asmergers and acquisitions, business process recovery, and regulatory response