Exam CISM topic 1 question 151 discussion

I go with D on this one as it includes corporate governance not just info sec alignment.

C. The PRIMARY purpose of establishing an information security governance framework is to align information security strategy and investments with organizational activities. This framework ensures that the organization's information security efforts are strategically aligned with its business goals and activities. It provides a structured approach to managing and governing information security by ensuring that security measures are integrated into the organization's overall strategy and operations. While the other options (A, B, and D) are important aspects of information security governance, they are often secondary objectives that are achieved through the primary goal of aligning information security with the broader organizational context.

C. align information security strategy and investments to support organizational activities.