nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #154

Which of these entities is responsible for signing an organization's policies?

The correct answer is B. Senior management. Security policies must be signed and formally approved by senior management (B) to carry organizational authority and enforceability. A policy signed only by a security engineer (A), finance (C), or HR (D) lacks the executive weight needed to mandate compliance across the…

Security Principles

Question

Which of these entities is responsible for signing an organization's policies?

Options

  • ASecurity engineer
  • BSenior management
  • CFinancial Department
  • DHuman Resources

How the community answered

(34 responses)
  • A
    6% (2)
  • B
    85% (29)
  • C
    3% (1)
  • D
    6% (2)

Explanation

Security policies must be signed and formally approved by senior management (B) to carry organizational authority and enforceability. A policy signed only by a security engineer (A), finance (C), or HR (D) lacks the executive weight needed to mandate compliance across the entire organization. Senior management's signature signals that the policy is an organizational directive, not just a departmental recommendation, and establishes accountability at the highest level.

Topics

#Policy Governance#Roles and Responsibilities#Organizational Policy#Management Responsibility

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice