- Home
- All questions
- Question 44
CISM study material · question 44 of 1000
A business unit head is told they are responsible for securing their operations, but they cannot approve spending, hire staff or mandate controls in their own unit. Which governance principle is breached?
Show the answer
Answer: C. Senior officials must be granted the authority needed to secure the operations and assets under their control
SP 800-100 makes the head of the organisation answerable for seeing that senior officials hold enough authority over what they are told to protect. Accountability without power to act is empty.
Source: NIST SP 800-100 (NIST) — Sec. 2.2.3.1 Agency Head