Who is ultimately responsible for the organizations information?
A. Data custodian
B. Chief information security officer (CISO)
C. Board of directors
D. Chief information officer (CIO)
Explanation:
The board of directors is ultimately responsible for the organizations information and is tasked with responding to issues that affect its protection. The data custodian is responsible for the maintenance and protection of data. This role is usually filled by the IT department. The chief information security officer (CISO) is responsible for security and carrying out senior managements directives. The chief information officer (CIO) is responsible for information technology within the organization and is not ultimately responsible for the organizations information.