Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C Risk Owner - the key word here is "Accountable"
A. Security management function. The accountability for ensuring effective cybersecurity controls are established typically lies with the "A. Security management function." This function is responsible for overseeing the organization's cybersecurity strategy, policies, and controls. They ensure that appropriate security measures are in place to protect the organization's information assets from cyber threats. While the other options (enterprise risk function, risk owner, IT management) may play roles in the overall cybersecurity effort, the primary accountability for cybersecurity control establishment usually rests with the security management function.
Agree it is C. The question is about accountability, so the risk owner. The other options are more on the responsibility side of the equation.