Information security governance is PRIMARILY driven by:

A.
technology constraints.

B.
regulatory requirements.

C.
litigation potential.

D.
business strategy.

Explanation:

Governance is directly tied to the strategy and direction of the business. Technology constraints,
regulatory requirements and litigation potential are all important factors, but they are necessarily in
line with the business strategy.