Study. uk . com
  1. Home
  2. All questions
  3. Question 45

CISM study material · question 45 of 1000

An organisation appoints its network operations lead to also act as senior information security officer, alongside their existing duties. Which expectation in the NIST role definition is not met?

  1. Holding a recognised professional security certification before appointment
  2. Reporting directly to the board rather than through the chief information officer's line
  3. Being recruited from outside the organisation
  4. Performing information security duties as the primary duty
Show the answer

Answer: D. Performing information security duties as the primary duty

NIST specifies that the senior information security officer performs security duties as the primary duty and heads an office with the mission and resources to help the organisation meet its security requirements.

Source: NIST SP 800-100 (NIST) — Sec. 2.2.3.3 Senior Agency Information Security Officer

Challenge yourself on this topic → Study as cards