Study. uk . com
  1. Home
  2. All questions
  3. Question 25

CISM study material · question 25 of 1000

In a large organisation, legal, finance, IT and security each run their own governance forum, and their decisions increasingly conflict. What does SP 800-39 advise?

  1. Abolish the sector forums and route every legal, finance and IT decision through the security office instead
  2. Establish a single aligned governance approach that coordinates the individual sector activities
  3. Let each sector proceed independently, since specialised expertise in each area outweighs the cost of occasional conflict
  4. Escalate every conflicting decision to the board, so that a single authority settles each dispute as it arises
Show the answer

Answer: B. Establish a single aligned governance approach that coordinates the individual sector activities

SP 800-39 recognises governance is frequently organised by sector but advises a single aligned approach that coordinates those activities and provides consistency organisation-wide.

Source: NIST SP 800-39 (NIST) — Sec. 2.3.1 Governance

Challenge yourself on this topic → Study as cards