Which of the following would be the BEST option to improve accountability for a system
administrator who has security functions?

A.
Include security responsibilities in the job description

B.
Require the administrator to obtain security certification

C.
Train the system administrator on penetration testing and vulnerability assessment

D.
Train the system administrator on risk assessment

Explanation:

The first step to improve accountability is to include security responsibilities in a job description.
This documents what is expected and approved by the organization. The other choices are
methods to ensure that the system administrator has the training to fulfill the responsibilities
included in the job description.