A group security office writes policy and provides oversight, but each operating unit funds its own security programme and its security officers report to their unit heads. Which structure is this?

Question

Answer 1

Show the answer

Answer: D. Decentralised

In a decentralised structure the central office retains policy development and oversight but not budget authority over operating units, whose security officers report to their own unit heads.

Source: NIST SP 800-100 (NIST) — Sec. 2.2.2 Governance Structures