Which of the following activities would BEST facilitate the improvement of control owner accountability for the expected performance of security controls?

Question

Options

• ARequiring control owners to attend regular security awareness training
• BPerforming control self-assessments (CSAs)
• CEnsuring controls are audited by an external audit firm
• DDirecting control owners to sign a document of accountability

• A
  4% (1)
• B
  71% (17)
• C
  8% (2)
• D
  17% (4)

Explanation

Performing control self-assessments (CSAs) is the best way to improve control owner accountability. CSAs involve control owners regularly assessing and reporting on the performance of their own controls. This approach encourages ownership, transparency, and helps identify any issues early. Empowers control owners to take responsibility for the performance of their controls. Provides ongoing insight into the effectiveness of security controls. Helps control owners identify weaknesses and take corrective actions in real-time. May lead to bias if control owners are not adequately independent or if they lack the expertise to accurately assess control performance. Can be time-consuming and resource-intensive if not streamlined.

No community discussion yet for this question.