Ensuring that the confidentiality, integrity and availability of the services are maintained to the levels agreed on the Service Level Agreement (SLA) is the responsibility of which role?

The Service Level Manager negotiates and manages SLAs but is responsible for coordinating agreed service levels across all service attributes broadly, not specifically for enforcing CIA security properties.

The Configuration Manager maintains the Configuration Management System and accurate records of configuration items, which has no direct ownership over information security properties of services.

The Change Manager controls the change management process to ensure changes are assessed and approved, but does not own or enforce CIA properties across live services.

The Information Security Manager owns the Information Security Management process, whose primary objective is to align IT security with business security and ensure the CIA triad is protected at the levels agreed in service level agreements. This role defines and maintains the information security policy and manages all security aspects across IT services, making it the correct owner of this CIA responsibility.