ExamGecko
Question list
Search
Search

Question 575 - CISM discussion

Report
Export

The ULTIMATE responsibility for ensuring the objectives of an information security framework are being met belongs to:

A.
)the information security officer.
Answers
A.
)the information security officer.
B.
the steering committee.
Answers
B.
the steering committee.
C.
the board of directors.
Answers
C.
the board of directors.
D.
the internal audit manager.
Answers
D.
the internal audit manager.
Suggested answer: C

Explanation:

The ultimate responsibility for ensuring the objectives of an information security framework are being met belongs to the board of directors, as they are accountable for the governance of the organization and the oversight of the information security strategy. The board of directors should ensure that the information security framework aligns with the business objectives, supports the business processes, and complies with the legal and regulatory requirements. The board of directors should also monitor the performance and effectiveness of the information security framework and provide guidance and direction for its improvement.

Reference= CISM Review Manual, 16th Edition eBook1, Chapter 1: Information Security Governance, Section: Enterprise Governance, Subsection: Board of Directors, Page 18.

asked 01/10/2024
CHEUNG KA FAI
41 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first