Which of the following department managers would be best suited to oversee the development of
an information security policy?

A.
Information systems

B.
Human resources

C.
Business operations

D.
Security administration

Explanation:
He is the most appropriate manager, this is because he know the inns and outs of
the business processes inside the company. Remember that he manages the business
operations, and are those operations the ones that make the company live and generate the
revenue. He knows who should access what and when. Security administrators develop the policy
with the information provided by persons like the Business operations manager. Human
Resources is not appropriate in this case, and the Information systems manager know about the
technology, but not the business needs of the company.