SSCP: Systems Security Certified PractitionerDemo

Question

Within an organization, an Information Technology security function should:

A Be a function within the information systems function of an organization.
B Report directly to a specialized business unit such as legal, corporate security or insurance.
C Be lead by a Chief Security Officer and report directly to the CEO.
D Be independent but report to the Information Systems function.

Explanation

An IT security function should have enterprise-wide authority and organizational independence so it can set policy, manage risk, and escalate security issues without being subordinated to the IT operations it oversees. Leadership by a Chief Security Officer reporting directly to the CEO provides that independence and executive accountability.

SSCP: Systems Security Certified PractitionerDemo

AstroTutor

Notes

Readiness

QuestionQ429

Community Discussion