CISM Information Security Governance Practice Question
A CISO is preparing a multi-year security roadmap. Which of the following is the MOST critical factor for ensuring the roadmap aligns with business strategy?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Understanding the organization's strategic business objectives and risk appetite
Understanding business objectives first ensures that security initiatives support the organization's goals and are prioritized accordingly.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Benchmarking against industry peers
Why it's wrong here
Benchmarking provides context but does not ensure alignment with specific business strategy.
- ✗
Assessing current security maturity level
Why it's wrong here
Maturity assessment is important but secondary to understanding business direction.
- ✗
Reviewing recent security incidents and lessons learned
Why it's wrong here
Incident review informs improvements but does not drive strategic alignment.
- ✓
Understanding the organization's strategic business objectives and risk appetite
Why this is correct
Directly linking roadmap to business objectives ensures relevance and executive support.
Go deeper
Related to this question
About these practice questions
One of 871 original CISM practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISM practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISM exam.