312-39V2: Certified SOC Analyst v2

Question

InfoSystem LLC, a US-based company, is creating an in-house SOC. John has been assigned responsibility for finalizing the SOC’s strategy, policies, and procedures. Identify John’s job role.

Explanation

A Chief Information Security Officer (CISO) leads the organization’s information-security program and is accountable for security strategy, governance, policies, and procedures. SOC analysts perform operational monitoring and incident analysis, while security engineers design and operate security technology rather than owning the overall security strategy.

Learn more

NIST CSRC Glossary: Chief Information Security Officer

312-39V2: Certified SOC Analyst v2

AstroTutor

Notes

Readiness

QuestionQ168

Community Discussion