The goal of a Chief information Security Officer (CISO) providing up-to-date metrics to a bank's risk committee is to ensure:
A Budgeting for cybersecurity increases year over year.B The committee knows how much work is being done.C Business units are responsible for their own mitigation.D The bank is aware of the status of cybersecurity risks
NOTE : someone is saying A and other is saying D ... i need the correct answer with clarity