QuestionQ213

VerifiedSecurity Concepts and Practices

Which of the following is responsible for making sure appropriate controls are established to address the integrity, confidentiality, and availability of IT systems and data?

Explanation

System and information owners are accountable for selecting, tailoring, and maintaining the controls needed to protect the systems and information under their ownership. Those controls must meet the required confidentiality, integrity, and availability objectives; security practitioners support that responsibility rather than replacing it.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!