Discuss ISC2 ISSEP Exam Topic 1 Question 73

Which of the following individuals are part of the senior management and are responsible for authorization of individual systems, approving enterprise solutions, establishing security policies, providing funds, and maintaining an understanding of risks at all levels? Each correct answer represents a complete solution. Choose all that apply.

AChief Information Officer

BAO Designated Representative

CSenior Information Security Officer

DUser Representative

EAuthorizing Official

Suggested Answer: A, B, C, E

Authorizing Official, AO Designated Representative (AODR), Chief Information Officer (CIO), and

Senior Information Security Officer (SISO) are part of the senior management. These individuals are

responsible for the following:

Authorization of individual systems

Approving enterprise solutions

Establishing security policies

Providing funds

Maintaining an understanding of risk at all levels

Answer option D is incorrect. A User Representative is not a part of the senior management in the

Authorization process.

Get Premium ISSEP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

17 comments · newest first

Omer 11 months ago

Really? I thought User Representatives had more say.

Tanesha 11 months ago

Totally agree with A and E, they have the authority.

Josefa 11 months ago

Wait, are we sure about B? Seems off.

Delfina 11 months ago

I think C should be included too.

Elenore 12 months ago

Definitely A and E for sure!

Helaine 12 months ago

I feel like the Senior Information Security Officer might be involved, but I can't recall if they have the same level of authority as the CIO.

Pearlie 12 months ago

The Authorizing Official seems like a key player here too, right? They usually have the final say on system authorizations.

Aliza 1 year ago

I'm not so sure about the AO Designated Representative. I remember it being mentioned in a practice question, but I'm unclear on their exact role.

Wendell 1 year ago

I think the Chief Information Officer definitely fits since they oversee IT strategy and security policies.

Jeffrey 1 year ago

Whew, this is a tough one. I'm a bit confused about the differences between some of these roles. I'll need to review my notes and really think through the responsibilities of each position to make sure I get this right.

Daniel 1 year ago

This seems straightforward enough. The Chief Information Officer, Senior Information Security Officer, and Authorizing Official are clearly the senior management roles responsible for the listed duties. I'll double-check my work, but I'm feeling good about this one.

Anissa 1 year ago

Okay, let's see. The question is asking about who is part of senior management and has certain security-related responsibilities. I think the Chief Information Officer and Authorizing Official are obvious choices, but I'm a bit unsure about the other options.

France 1 year ago

Hmm, this is a tricky one. I'm not entirely sure about all the roles and responsibilities here. I'll need to carefully read through the options and think it through step-by-step.

Jerry 1 year ago

This looks like a classic senior management question. I'm pretty confident I can handle this one - the key is to identify the individuals responsible for the listed responsibilities.

Jarod 1 year ago

This question is asking about the appropriate level of skepticism for fraud examiners. I'll need to carefully consider the nuances of each answer choice.

Glennis 1 year ago

Hmm, I'm not too sure about this one. I'll have to think it through carefully.

Providencia 1 year ago

I'm not completely confident, but isn't a service registry just a way to manage service instances? That makes me think it's true.

ISC2 ISSEP Exam - Topic 1 Question 73 Discussion