Certified Information Security Manager CISM · Free Practice Question Medium
Question 67
What strategic approach should a security manager prioritize to ensure effective policy enforcement in a decentralized organization?
- A Focus on strict adherence to global standards across all units
- B Adopt a flexible approach that emphasizes guidelines over strict controls
- C Implement centralized oversight mechanisms while allowing local adaptation
- D Rely on local leadership to enforce policies based on regional needs
Reveal correct answer
Correct answer: C
Explanation
The Correct Answer: Implement centralized oversight mechanisms while allowing local adaptation: This approach ensures consistency in policy enforcement while providing the necessary flexibility for local contexts, balancing control and adaptation. The Incorrect Answers: Focus on strict adherence to global standards across all units: In a decentralized organization, rigid enforcement can lead to resistance and operational inefficiencies due to varying local requirements. Adopt a flexible approach that emphasizes guidelines over strict controls: While flexibility is important, a lack of enforcement mechanisms can lead to inconsistent application and security gaps. Rely on local leadership to enforce policies based on regional needs: While local leadership support is valuable, without centralized oversight, there is a risk of divergent practices that may not align with organizational objectives.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
