CISSP-ISSEP: Information Systems Security Engineering Professional

By ISC · Question Mode

QuestionQ172

VerifiedRisk Management

Which of the following individuals is a senior-level manager with the authority and capability to assess the system’s mission, business case, and budgetary requirements while also considering its security risks?

Explanation

The DAA is the senior official responsible for making risk-based authorization decisions. This role evaluates security risk in the context of mission needs, business justification, and available resources or budget.

Community Discussion

No comments yet. Be the first to start the discussion!