CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ1191

Information Security Program

An organization has deployed a new email filter to reduce risk associated with its email system. Who is BEST suited to serve as the control owner?

  • A Head of IT department
  • B Head of compliance
  • C Head of corporate communications
  • D Head of information security
Explanation

A technical control should be owned by the function accountable for the system in which it operates and able to ensure its ongoing operation and effectiveness. The head of the IT department has responsibility for the email system and can direct its implementation, configuration, maintenance, and remediation. A control owner is the person assigned authority and accountability for control-related decisions and for ensuring that the control is implemented and operates effectively.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!