CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ996

Information Security Governance

Which of the following is BEST suited to provide regular reporting to the board on the status of compliance with a global security standard?

  • A Legal counsel
  • B Quality assurance (QA)
  • C Information security
  • D Internal audit
Explanation

Internal audit provides independent assurance to the board regarding whether organizational controls comply with applicable security standards. Its independence from operational security management makes it the most appropriate function for board-level compliance reporting.

Community Discussion

No comments yet. Be the first to start the discussion!