Focus of Information Security Management Programs:
The primary goal is to protect critical business processes and revenue streams by ensuring the confidentiality, integrity, and availability of information assets.
Why This is Correct:
* Business processes and revenue are at the heart of organizational operations.
* The security management program prioritizes assets that directly impact these areas.
Why Other Options Are Incorrect:
* A. All organizational assets: Impractical and not prioritized equally.
* C. Intellectual property released into the public domain: Less critical once public.
* D. Against DDoS attacks: Part of the scope but not the main focus.
References:
EC-Council emphasizes that protecting critical business operations is the cornerstone of an effective Information Security Management program.