Which of the following is a benefit of information security governance?

A.
Reduction of the potential for civil or legal liability

B.
Questioning trust in vendor relationships

C.
Increasing the risk of decisions based on incomplete management information

D.
Direct involvement of senior management in developing control processes

Explanation:

Information security governance decreases the risk of civil or legal liability. The remaining answers
are incorrect. Option D appears to be correct, but senior management would provide oversight and

approval as opposed to direct involvement in developing control processes.