The correct answer is A because decentralized information security functions are closer to local business units, systems, users, and operational needs. This proximity can improve responsiveness because local teams can react faster to business changes, incidents, control needs, and operational concerns. Decentralization may also improve understanding of specific business processes and local risk conditions. However, decentralization does not usually provide greater objectivity because local teams may be influenced by business pressures. It also does not necessarily improve compliance or uniformity; in fact, decentralized models may create inconsistent control implementation unless strong governance, standards, and oversight exist. Greater uniformity is more commonly associated with centralized security management. CISM governance recognizes that organizational structure affects security effectiveness. A decentralized model may be useful where rapid local response and business alignment are important, but it must be balanced with enterprise-wide policies, standards, and monitoring. Therefore, improved responsiveness is the main advantage.
Reference: CISM Information Security Governance; centralized and decentralized security models, organizational structure, responsiveness, and governance oversight principles.

Section: INFORMATION SECURITY PROGRAM DEVELOPMENT

Section: INCIDENT MANAGEMENT AND RESPONSE
Explanation

Explanation/Reference:
Reference https://www.isaca.org/Knowledge-Center/Documents/Glossary/glossary.pdf