Q). Which one of the following is an effective way of tying security policy to business objectives?

A. Information classification.
B. Systems master plan.
C. Information engineering.
D. Enterprise architecture.

Answer:

The answer is 'A' Information Classification. The most effective way of ensuring that security policy is in congruence with business objectives is to first classify the information resources of the enterprise. All the other options are incorrect.