
An information security measurement program can be scoped to a variety of environments and needs. Which of the following is the least feasible scope? (Wentz QOTD)
A. The information system-level security performance for an operational information system
B. The integration of information security into the system development life cycle (SDLC)
C. The linkage between information security and enterprise strategic planning
D. The enterprise-wide information security performance
Kindly be reminded that the suggested answer is for your reference only. It doesn’t matter whether you have the right or wrong answer. What really matters is your reasoning process and justifications.

