 Why Involvement Is Critical:Involving business units ensures that controls are practical, aligned with operational needs, and less likely to face resistance. Collaborative design fosters ownership and compliance.

 Key Considerations:

Engagement leads to tailored controls that support business processes without undue burden.

Promotes alignment between security objectives and business requirements.

 Why Not Other Options:

Allowing business units to decide controls (A) may lead to inconsistent security practices.

Creating separate controls (B) can increase complexity and reduce uniformity.

Mandating controls with audit schedules (D) enforces compliance but does not promote acceptance.

 EC-Council CISO Alignment:Collaborative control design reflects a mature and inclusive approach to security management.