Free Preparation Discussions
MENU
ISC2 SSCP Exam - Topic 3 Question 119 Discussion
Topic #: 3
Who is ultimately responsible for the security of computer based information systems within an organization?
If there is no support by management to implement, execute, and enforce security policies and procedure, then they won't work. Senior management must be involved in this because they have an obligation to the organization to protect the assests . The requirement here is for management to show ''due diligence'' in establishing an effective compliance, or security program.
The following answers are incorrect:
The tech support team. Is incorrect because the ultimate responsibility is with management for the security of computer-based information systems.
The Operation Team. Is incorrect because the ultimate responsibility is with management for the security of computer-based information systems.
The Training Team. Is incorrect because the ultimate responsibility is with management for the security of computer-based information systems.
Reference(s) used for this question:
OIG CBK
Information Security Management and Risk Management (page 20 - 22)
Lemuel
3 days agoAmie
9 days agoTamala
14 days agoLorean
19 days agoMagdalene
24 days agoCrista
29 days agoJudy
1 month agoAntonio
1 month agoVerona
1 month agoBarb
2 months agoStefania
2 months agoIrma
2 months ago