An information security manager has identified and implemented mitigating controls according to industry best practices. Which of the following is the GREATEST risk associated with this approach?
A. The mitigation measures may not be updated in a timely manner.
B. The cost of control implementation may be too high.
C. The security program may not be aligned with organizational objectives.
D. Important security controls may be missed without senior management input.
Answer:C
An information security manager has identified and implemented mitigating controls according to industry best practices. Which of the following is the GREATEST risk associated with this approach?
A. The mitigation measures may not be updated in a timely manner. B. The cost of control implementation may be too high. C. The security program may not be aligned with organizational objectives. D. Important security controls may be missed without senior management input.