What is the information security steering committee's PRIMARY role in the development of security policies?

The correct answer is C. Ensuring policies facilitate business practices. The primary role of the information security steering committee in developing security policies is to ensure that policies support and facilitate business practices. Their responsibility is to align security initiatives with business objectives, balancing protection with…

Submitted by haru.x· Apr 18, 2026Information Security Governance

Question

Options

ACommissioning an organization-wide security audit
BDrafting language related to policy noncompliance
CEnsuring policies facilitate business practices
DOverseeing a gap analysis against industry best practice

How the community answered

(40 responses)

A
3% (1)
B
3% (1)
C
88% (35)
D
8% (3)

Explanation

The primary role of the information security steering committee in developing security policies is to ensure that policies support and facilitate business practices. Their responsibility is to align security initiatives with business objectives, balancing protection with operational efficiency.

Topics

#Information Security Steering Committee#Security Policy Development#Business Alignment#Governance Role

Community Discussion

No community discussion yet for this question.

Full CISM Practice