1. Home
2. All questions
3. Question 164

CISM study material · question 164 of 1000

A security manager wants to reorganise security governance in a way the wider organisational structure does not support. What does NIST observe about such situations?

• Security governance

1. Governance structure is determined solely by the size of the security budget
2. The wider organisation must be restructured to fit the security model
3. Because security governance depends heavily on the overall organisational structure, organisations are often limited in how they can organise it
4. Security governance structure may be set independently of the wider organisation, since the security function reports on its own line directly to the board

Challenge yourself on this topic → Study as cards