SSCP · Question #238
Which of the following would be best suited to oversee the development of an information security policy?
The correct answer is C. Security Officers. Security Officers (Chief Security Officer or Chief Information Security Officer) are responsible for the organization's overall security posture and strategy. They have the authority, cross-functional visibility, and mandate to develop policies that apply organization-wide…
Question
Which of the following would be best suited to oversee the development of an information security policy?
Options
- ASystem Administrators
- BEnd User
- CSecurity Officers
- DSecurity administrators
How the community answered
(30 responses)- B3% (1)
- C93% (28)
- D3% (1)
Explanation
Security Officers (Chief Security Officer or Chief Information Security Officer) are responsible for the organization's overall security posture and strategy. They have the authority, cross-functional visibility, and mandate to develop policies that apply organization-wide. System administrators and security administrators are technical implementers who operate within policies but lack the organizational authority to define them. End users lack both the authority and the technical security expertise. Policy development requires both strategic leadership and security expertise, which is the Security Officer's core role.
Topics
Community Discussion
No community discussion yet for this question.