Certified Information Security Manager CISM · Free Practice Question Medium
Question 65
You are the Information Security Manager of HDA Inc. You are focused on establishing an effective approach to ensure that management takes ownership of the decision-making process for information security. What approach is MOST effective?
- A A. Implementing strict security policies and procedures.
- B B. Conducting regular security audits and assessments.
- C C. Establishing a steering committee represented by senior management.
- D D. Delegating decision-making authority to the IT security team.
Reveal correct answer
Correct answer: C
Explanation
Correct Answer: C. Establishing a steering committee represented by senior management. Explanation: Forming a steering committee with senior management representation ensures that decision-making for information security is closely aligned with organizational goals and priorities. This approach facilitates top-level commitment and accountability. While options A, B, and D may contribute to a comprehensive security strategy, a steering committee with senior management involvement is the most effective in integrating information security into the broader decision-making framework of the organization.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
