In the context of effective information security governance, the primary objective of value delivery is to:

A.
optimize security investments in support of business objectives.

B.
implement a standard set of security practices.

C.
institute a standards-based solution.

D.
implement a continuous improvement culture.

Explanation:
In the context of effective information security governance, value delivery is implemented to ensure optimization
of security investments in support of business objectives. The tools and techniques for implementing value
delivery include implementation of a standard set of security practices, institutionalization and commoditization
of standards-based solutions, and implementation of a continuous improvement culture considering security as
a process, not an event.