Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Systems Auditor · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C: Security projects should be governed and approved by a dedicated information security function or executive-level governance body, not by operational managers like a data center manager, who may have conflicting priorities (e.g., performance over security).
it can result in a lack of expertise, inadequate security coverage, and operational inefficiencies. This can lead to a higher risk of security incidents, breaches, and compliance failures, as there may not be sufficient qualified personnel to enforce policies, monitor threats, and respond to incidents.
C. why would be DC Manager approved a security project?