Study. uk . com
  1. Home
  2. All questions
  3. Question 50

CISM study material · question 50 of 1000

Two employees commit the same policy violation, and one is dismissed while the other receives no sanction. Which role owns the practice that failed here?

  1. The personnel security officer, who ensures sanctions are applied consistently
  2. The chief financial officer, who reviews cost of controls
  3. The enterprise architect, who defines the control framework
  4. The authorising official, who accepts residual risk
Show the answer

Answer: A. The personnel security officer, who ensures sanctions are applied consistently

The personnel security officer is responsible for the organisation's personnel security programme, including position categorisation, screening, termination and transfer, and for ensuring consistent and appropriate sanctions for control violations.

Source: NIST SP 800-100 (NIST) — Sec. 2.2.3.5 Related Roles — Personnel Security

Challenge yourself on this topic → Study as cards