An outcome of effective security governance is:

A.
business dependency assessment

B.
strategic alignment.

C.
risk assessment.

D.
planning.

Explanation:

Business dependency assessment is a process of determining the dependency of a business on
certain information resources. It is not an outcome or a product of effective security management.
Strategic alignment is an outcome of effective security governance. Where there is good
governance, there is likely to be strategic alignment. Risk assessment is not an outcome of
effective security governance; it is a process. Planning comes at the beginning of effective security
governance, and is not an outcome but a process.