EC-Council
512-50 · Question #312
Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new…
The correct answer is B. The CISO does not report directly to the CEO of the organization. See the full explanation below for the reasoning.
Question
Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agend
Options
- AThe CISO has been able to implement a number of technical controls and is able to influence the
- BThe CISO does not report directly to the CEO of the organization
- CThe CISO reports to the IT organization
- DThe CISO has not implemented a policy management framework
- EThe CISO has not implemented a security awareness program
How the community answered
(42 responses)- A7% (3)
- B76% (32)
- C2% (1)
- D12% (5)
- E2% (1)
Community Discussion
No community discussion yet for this question.