Which business stakeholder is accountable for the integrity of a new information system?

Question

Options

• ACISO
• BCompliance Officer
• CProject manager
• DBoard of directors

• A
  77% (27)
• B
  14% (5)
• C
  6% (2)
• D
  3% (1)

Explanation

The CISO (Chief Information Security Officer) is accountable for the integrity of information systems because their core mandate is to own and enforce information security policies, data integrity controls, and risk management across all systems - including new ones being introduced to the organization.

• B (Compliance Officer) ensures the organization follows laws and regulations, but they verify adherence to rules rather than owning the security integrity of specific systems.
• C (Project manager) oversees delivery - scope, timeline, and budget - but accountability for security integrity transfers to the CISO once the system is operational.
• D (Board of directors) holds governance-level oversight and sets strategic direction, but operational accountability for information security sits with the CISO, not the board.

Memory tip: Think "I" in CISO = Integrity. The CISO is the executive whose job title literally contains "Information Security" - making them the natural owner of any system's security integrity.

No community discussion yet for this question.