Study. uk . com
  1. Home
  2. All questions
  3. Question 44

CISM study material · question 44 of 1000

A business unit head is told they are responsible for securing their operations, but they cannot approve spending, hire staff or mandate controls in their own unit. Which governance principle is breached?

  1. Responsibility for securing operations must always rest with the central security office, which holds the budget and the control mandate
  2. Business unit heads should not hold security responsibilities
  3. Senior officials must be granted the authority needed to secure the operations and assets under their control
  4. Authority must be delegated only in writing to be valid
Show the answer

Answer: C. Senior officials must be granted the authority needed to secure the operations and assets under their control

SP 800-100 makes the head of the organisation answerable for seeing that senior officials hold enough authority over what they are told to protect. Accountability without power to act is empty.

Source: NIST SP 800-100 (NIST) — Sec. 2.2.3.1 Agency Head

Challenge yourself on this topic → Study as cards