Which of the following is the information security steering committee's role with regard to the organization's information security strategy?

The correct answer is A. Reviewing and approving the information security strategy. The steering committee provides governance and oversight, so its role is to review and approve the information security strategy to ensure alignment with business objectives and risk appetite; development and execution are management responsibilities.

Submitted by chiamaka_o· Apr 18, 2026Information Security Governance

Question

Options

AReviewing and approving the information security strategy
BCalculating return on investment (ROI) for information security initiatives
CCommunicating stakeholder responsibilities for information security
DDeveloping and executing the information security strategy

How the community answered

(66 responses)

A
92% (61)
B
5% (3)
C
2% (1)
D
2% (1)

Explanation

The steering committee provides governance and oversight, so its role is to review and approve the information security strategy to ensure alignment with business objectives and risk appetite; development and execution are management responsibilities.

Topics

#Information Security Governance#Steering Committee Roles#Security Strategy#Strategic Approval

Community Discussion

No community discussion yet for this question.

Full CISM Practice