Who of the following is responsible for ensuring that proper controls are in place to address
integrity, confidentiality, and availability of IT systems and data?

A.
Business and functional managers.

B.
IT Security practitioners.

C.
System and information owners.

D.
Chief information officer.

Explanation:
This is true, the people who own the information and the equipment are the ones who need to
ensure they are making everything to get integrity, confidentiality and availability. The security
professionals can develop policies and show how to keep the environment secure, but it depends on
the owners of the actual data to achieve the security.