What principle is used when a CISO evaluates controls to ensure they satisfy the organization’s...

Comprehensive and Detailed Explanation (250–350 words) From Exact Extract from Chief Information Security Officer (CCISO) Documents:

The EC-Council CCISO Body of Knowledge repeatedly emphasizes alignment to the business as a foundational principle when evaluating security controls. CCISO guidance states that controls must support operational objectives, not impede them.

Least privilege and fiduciary oversight are important control concepts, but CCISO materials highlight that the CISO’s primary responsibility is ensuring controls enable business operations while managing risk.

Therefore, alignment to the business is the correct and CCISO-validated answer.