CERTIFIED-IN-CYBERSECURITY · Question #154
Which of these entities is responsible for signing an organization's policies?
The correct answer is B. Senior management. Security policies must be signed and formally approved by senior management (B) to carry organizational authority and enforceability. A policy signed only by a security engineer (A), finance (C), or HR (D) lacks the executive weight needed to mandate compliance across the…
Question
Which of these entities is responsible for signing an organization's policies?
Options
- ASecurity engineer
- BSenior management
- CFinancial Department
- DHuman Resources
How the community answered
(34 responses)- A6% (2)
- B85% (29)
- C3% (1)
- D6% (2)
Explanation
Security policies must be signed and formally approved by senior management (B) to carry organizational authority and enforceability. A policy signed only by a security engineer (A), finance (C), or HR (D) lacks the executive weight needed to mandate compliance across the entire organization. Senior management's signature signals that the policy is an organizational directive, not just a departmental recommendation, and establishes accountability at the highest level.
Topics
Community Discussion
No community discussion yet for this question.