As an outcome of information security governance, strategic alignment provides:

A.
security requirements driven by enterprise requirements.

B.
baseline security following best practices.

C.
institutionalized and commoditized solutions.

D.
an understanding of risk exposure.

Explanation:
Information security governance, when properly implemented, should provide four basic outcomes:
strategic alignment, value delivery, risk management and performance measurement. Strategic
alignment provides input for security requirements driven by enterprise requirements. Value
delivery provides a standard set of security practices, i.e., baseline security following best practices
or institutionalized and commoditized solutions. Risk management provides an understanding of
risk exposure.