Which document provides a standardized approach for review and measurement of an information security program?

• A. PRISMA (IR 7358)
• B. IR 7564
• C. IR 7359
• D. IR 7581

Answer: (A)

PRISMA (IR 7358) provides a standardized approach for review and measurement of an information security program. It establishes a consistent framework with defined assessment criteria, a scoring or rating system, evidence requirements, and structured reporting, so evaluations are objective and comparable across units and over time. This enables benchmarking, tracking of improvements, and alignment with risk management goals, making it the clear choice for a document that standardizes how an organization reviews and measures its information security program. The other documents address related security topics but do not offer the unified measurement framework that PRISMA provides.