Ensuring that the actions of a set of people, applications and systems follow the organization's rules is BEST described as:

Question

Options

• ARisk management
• BSecurity management
• CMitigation management
• DCompliance management

• A
  8% (3)
• B
  13% (5)
• C
  3% (1)
• D
  78% (31)

Explanation

Compliance management (D) is the discipline focused on ensuring that people, applications, and systems act in accordance with an organization's established rules, policies, and regulations - which is exactly what the question describes.

Why the distractors are wrong:

• A. Risk management - focuses on identifying, assessing, and prioritizing potential threats; it asks "what could go wrong?" not "are we following the rules?"
• B. Security management - broader in scope, covering protection of assets from threats (confidentiality, integrity, availability); compliance may be one component, but security management is not defined by rule-following alone.
• C. Mitigation management - not a standard ITSM/security framework term; mitigation refers to reducing the impact of a risk, not enforcing adherence to rules.

Memory tip: Think of compliance as the word "comply" - when employees, apps, and systems comply with organizational rules, that's compliance management. If you see a question about enforcing or verifying adherence to rules, policies, or regulations, default to compliance.

No community discussion yet for this question.