QuestionQ1131

Information Security Program

How does an organization’s information security steering committee help achieve the objectives of its information security program?

  • A Monitoring information security resources
  • B Making decisions on security priorities
  • C Enforcing regulatory and policy compliance
  • D Evaluating information security metrics
Explanation

An information security steering committee provides governance by making decisions about security priorities, aligning security initiatives, funding, and risk decisions with organizational objectives. ISACA describes executive steering committees as guiding strategy, approving funding, and making formal risk decisions.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!