nerdexam
(ISC)2

CCSP · Question #119

You are the IT security manager for a video game software development company. Which of the following is most likely to be your primary concern on a daily basis?

The correct answer is C. Security flaws in your organization. As an IT security manager for a software development company, your primary daily concern is most likely the security posture and vulnerabilities within your own organization's internal systems and infrastructure.

Submitted by eva_at· Apr 18, 2026Cloud Security Operations

Question

You are the IT security manager for a video game software development company. Which of the following is most likely to be your primary concern on a daily basis?

Options

  • AHealth and human safety
  • BSecurity flaws in your products
  • CSecurity flaws in your organization
  • DRegulatory compliance

How the community answered

(42 responses)
  • A
    5% (2)
  • B
    7% (3)
  • C
    71% (30)
  • D
    17% (7)

Why each option

As an IT security manager for a software development company, your primary daily concern is most likely the security posture and vulnerabilities within your own organization's internal systems and infrastructure.

AHealth and human safety

Health and human safety are typically the domain of occupational health and safety departments, not primarily an IT security manager's daily concern.

BSecurity flaws in your products

While important, security flaws in your products are usually the primary responsibility of a product security team or secure software development lifecycle (SSDLC) processes, distinct from the internal IT security operations.

CSecurity flaws in your organizationCorrect

An IT security manager's daily focus is on safeguarding the organization's internal IT assets, data, and operations from threats and vulnerabilities. This includes securing networks, servers, employee endpoints, and internal applications, which directly falls under 'security flaws in your organization'.

DRegulatory compliance

Regulatory compliance is an ongoing, high-level concern that guides security policies, but the daily hands-on primary focus of an IT security manager is often operational security to meet those compliance objectives.

Concept tested: Role of an internal IT security manager

Topics

#Organizational security#Security management#Daily operations#Vulnerability management

Community Discussion

No community discussion yet for this question.

Full CCSP Practice