nerdexam
(ISC)2

CGRC · Question #637

System authorization programs are marked by frequent failure due to, among other things, poor planning, poor systems inventory, failure to fix responsibility at the system level, and Response:

The correct answer is D. lack of management support.. System authorization programs often fail due to a combination of operational issues and a fundamental lack of support from upper management.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

System authorization programs are marked by frequent failure due to, among other things, poor planning, poor systems inventory, failure to fix responsibility at the system level, and Response:

Options

  • Ainability to work with remote teams.
  • Black of a program management office.
  • Cinsufficient system rights.
  • Dlack of management support.

How the community answered

(52 responses)
  • A
    4% (2)
  • B
    2% (1)
  • D
    94% (49)

Why each option

System authorization programs often fail due to a combination of operational issues and a fundamental lack of support from upper management.

Ainability to work with remote teams.

While remote teams can present coordination challenges, it's not typically cited as a primary systemic reason for authorization program failure compared to fundamental organizational support.

Black of a program management office.

While a Program Management Office (PMO) can facilitate large programs, its absence is not universally cited as a direct cause of system authorization program failure in the same vein as management support.

Cinsufficient system rights.

Insufficient system rights might be a technical issue within a system but does not represent a root cause for the failure of an entire system authorization program.

Dlack of management support.Correct

A lack of management support is a critical factor for the failure of any major organizational program, including system authorization. Without strong backing from management, resources may be insufficient, prioritization may be low, and the necessary organizational changes for a successful authorization process may not be implemented effectively.

Concept tested: Factors for success/failure of authorization programs

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-37r2.pdf

Topics

#Program failure factors#Management commitment#Authorization program governance#Organizational support

Community Discussion

No community discussion yet for this question.

Full CGRC Practice