CISM: Certified Information Security Manager

Question

An organization’s CIO has assigned the information security manager to draft the charter for an information security steering committee. The committee will consist of the CIO, the IT shared services manager, the vice president of marketing, and the information security manager. Which of the following is the MOST significant concern with forming this committee?

Explanation

An information security steering committee needs sufficiently broad business participation to ensure that security governance, priorities, and risk decisions reflect enterprise-wide business requirements. With only the vice president of marketing representing business functions and three members from IT or security, the committee lacks adequate business representation.

CISM: Certified Information Security Manager

AstroTutor

Notes

Readiness

QuestionQ64

Community Discussion