In the context of effective information security governance, the primary objective of value delivery
is to:

A.
optimize security investments in support of business objectives.

B.
implement a standard set of security practices.

C.
institute a standards-based solution.

D.
implement a continuous improvement culture.

Explanation:
In the context of effective information security governance, value delivery is implemented to ensure
optimization of security investments in support of business objectives. The tools and techniques for
implementing value delivery include implementation of a standard set of security practices,
institutionalization and commoditization of standards-based solutions, and implementation of a
continuous improvement culture considering security as a process, not an event.