A company was charged with negligence. The judge ruled that while the company produced evidence of good security policies, the company was still guilty of breach of privacy due to lack of enforcement of the security policies. Which of the following management principles was violated?
A.
Lack of due care
B.
Lack of due diligence
C.
Lack of management oversight
D.
Lack of standards
Explanation:
It is not enough to create good security policy. It is managements
responsibility to make sure the policy directives are carried out. Lack of standards
and lack of oversight may have contributed to the lack of policy enforcement.