Which of the following is the BEST example of weak management commitment to the protection of security assets and resources?

The correct answer is A. poor governance over security processes and procedures. Governance is the direct expression of management's commitment to security. It is management's responsibility to establish, enforce, and oversee the governance framework - the policies, processes, accountability structures, and oversight mechanisms that drive the security…

Information Governance in Healthcare

Question

Options

Apoor governance over security processes and procedures
Bimmature security controls and procedures
Cvariances against regulatory requirements
Dunanticipated increases in security incidents and threats

How the community answered

(33 responses)

A
94% (31)
B
3% (1)
C
3% (1)

Explanation

Governance is the direct expression of management's commitment to security. It is management's responsibility to establish, enforce, and oversee the governance framework - the policies, processes, accountability structures, and oversight mechanisms that drive the security program. Poor governance means management has failed to fulfill this core obligation, making it the clearest and most direct indicator of weak management commitment. The other options are symptoms or consequences rather than root causes: immature controls may result from inadequate investment; regulatory variances may stem from governance failures; and increased incidents may result from any number of technical or procedural gaps. Only poor governance unambiguously points to a failure of management will and leadership.

Topics

#Management Commitment#Security Governance#Information Security Management#Organizational Security

Community Discussion

No community discussion yet for this question.

Full HCISPP Practice