Who is responsible for providing reports to the senior management on the effectiveness of the security controls?

The correct answer is D. Information systems auditors. IT auditors determine whether systems are in compliance with the security policies, procedures, standards, baselines, designs, architectures, management direction and other requirements" and "provide top company management with an independent view of the controls that have been…

Submitted by diego_uy· Apr 18, 2026Security Concepts and Practices

Question

Who is responsible for providing reports to the senior management on the effectiveness of the security controls?

Options

AInformation systems security professionals
BData owners
CData custodians
DInformation systems auditors

How the community answered

(53 responses)

A
4% (2)
B
8% (4)
C
2% (1)
D
87% (46)

Explanation

IT auditors determine whether systems are in compliance with the security policies, procedures, standards, baselines, designs, architectures, management direction and other requirements" and "provide top company management with an independent view of the controls that have been designed and their effectiveness." "Information systems security professionals" is incorrect. Security professionals develop the security policies and supporting baselines, etc. "Data owners" is incorrect. Data owners have overall responsibility for information assets and assign the appropriate classification for the asset as well as ensure that the asset is protected with the proper controls. "Data custodians" is incorrect. Data custodians care for an information asset on behalf of the data

Topics

#Security roles and responsibilities#Information systems auditing#Security governance#Control effectiveness reporting

Community Discussion

No community discussion yet for this question.

Full SSCP Practice