CISM Question 16

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  Corporate accountability is the sum of its parts. An organization becomes accountable when the individuals within it are held accountable for their specific contributions to security. If no single person or team is clearly responsible for a security task (i.e. patching, reviewing logs, data handling policies) then when something goes wrong, the organization, as a whole, struggles to identify the root cause or assign responsibility. There has to be a fall guy.

• Chose B1

  B - corporate accountability increases individual accountability

• Chose C2

  C. Enforce *individual* accountability