Granite Ridge Technologies in New Jersey is preparing to formalize its information security governance model.

The correct answer is A. ISO/IEC 27001:2022.

ISO/IEC 27001 is the international standard for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS). It is the best match when an organization wants a governance framework to manage confidentiality, integrity, availability, risk management, regulatory obligations, and stakeholder assurance.

CEH-aligned standards material identifies ISO/IEC 27001 as the standard that defines requirements for implementation, maintenance, and improvement of an information security management system. It also associates the standard with information security management processes, cost-effective risk management, security requirements, and compliance with laws . Another CEH-aligned reference states that ISO/IEC 27001 provides requirements for creating, maintaining, and improving organizational information security systems and addresses compliance with laws as well as internal security requirements and objectives .

Option B. ISO/IEC 27005:2022 is incorrect because ISO/IEC 27005 focuses on information security risk management guidance, not the full certifiable ISMS framework.

Option C. ISO/IEC 27701:2019 is incorrect because it extends privacy information management, not general information security governance.

Option D. ISO/IEC 27002:2022 is incorrect because it provides security control guidance, but ISO/IEC 27001 is the management system standard used for certification and governance.

Therefore, the best answer is A. ISO/IEC 27001:2022.