Which of the following governance bodies provides management, operational and technical controls to satisfy security requirements?

The correct answer is B. Senior Management. Senior Management bears ultimate responsibility for organizational security governance. They are accountable for setting security policy, allocating resources, and ensuring that management, operational, and technical controls are in place to meet security requirements. The CISO…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Options

AChief Information Security Officer
BSenior Management
CInformation Security Steering Committee
DBusiness Unit Manager

How the community answered

(22 responses)

B
91% (20)
C
5% (1)
D
5% (1)

Explanation

Senior Management bears ultimate responsibility for organizational security governance. They are accountable for setting security policy, allocating resources, and ensuring that management, operational, and technical controls are in place to meet security requirements. The CISO advises and manages the security program but reports to senior management. The Information Security Steering Committee provides guidance and oversight but does not have ultimate authority. Business Unit Managers are responsible within their own areas. In security frameworks (NIST, ISO 27001), senior management's commitment and accountability is essential-without executive sponsorship and direction, no security program can fully succeed.

Topics

#Governance#Roles and Responsibilities#Organizational Structure#Security Controls

Community Discussion

No community discussion yet for this question.

Full CAP Practice