MENU
Which of the following is the MOST effective way to obtain business owner approval of cybersecurity initiatives across an organisation?
The most effective way to obtain business owner approval for cybersecurity initiatives is to create a steering committee that includes key stakeholders from different departments. This approach works because:
Inclusive Decision-Making: Involving business owners in a structured committee fosters collaboration and buy-in.
Alignment with Business Goals: A steering committee ensures that cybersecurity initiatives align with the organization's strategic objectives.
Regular Communication: Provides a formal platform to present cybersecurity challenges, proposed solutions, and progress updates.
Informed Decisions: Business owners are more likely to support initiatives when they understand the risks and benefits.
Consensus Building: A committee fosters a sense of ownership and shared responsibility for cybersecurity.
Other options analysis:
A . Provide data classifications: While useful for identifying data sensitivity, this alone does not directly gain approval.
C . Generate progress reports: These are informative but lack the strategic collaboration needed for decision-making.
D . Conduct an Internal audit: Helps assess current security posture but does not engage business owners proactively.
CCOA Official Review Manual, 1st Edition Reference:
Chapter 2: Governance and Management: Discusses forming committees for cross-functional decision-making.
Chapter 5: Risk Management Strategies: Emphasizes stakeholder engagement through structured groups.