Who among the following has the ultimate responsibility for the protection of the organization's information?

Question

Options

• ASenior management
• BApplication owner
• CUser
• DTechnology provider

• A
  82% (46)
• B
  4% (2)
• C
  4% (2)
• D
  11% (6)

Explanation

Senior management holds ultimate responsibility for protecting organizational information because they set policy, allocate resources, and are accountable to stakeholders and regulators - responsibility cannot be delegated away, only authority can. Application owners (B) are responsible for specific systems they oversee, not the organization's information as a whole. Users (C) are responsible for their own actions but have no authority over organizational security strategy or funding. Technology providers (D) are vendors or partners who support security capabilities but bear no ultimate liability for how the organization manages its information.

Memory tip: Think of it as a corporate hierarchy - the buck stops at the top. Senior management signs the security policies and owns the consequences (regulatory fines, reputational damage, board accountability), so they own the responsibility.

No community discussion yet for this question.