As an outcome of information security governance, strategic alignment provides:

A.
security requirements driven by enterprise requirements.

B.
baseline security following best practices.

C.
institutionalized and commoditized solutions.

D.
an understanding of risk exposure.

Explanation:

Information security governance, when properly implemented, should provide four basic
outcomes: strategic alignment, value delivery, risk management and performance measurement.
Strategic alignment provides input for security requirements driven by enterprise requirements.
Value delivery provides a standard set of security practices, i.e., baseline security following best
practices or institutionalized and commoditized solutions. Risk management provides an
understanding of risk exposure.