Who of the following is responsible for ensuring that proper controls are in place to address
integrity, confidentiality, and availability of IT systems and data?
A.
Business and functional managers.
B.
IT Security practitioners.
C.
System and information owners.
D.
Chief information officer.
Explanation:
This is true, the people who own the information and the equipment are the ones
who need to ensure they are making everything to get integrity, confidentiality and availability. The
security professionals can develop policies and show how to keep the environment secure, but it
depends on the owners of the actual data to achieve the security.
Another weird question. The IT custodian (which is not a choice here) is actually responsible for maintaining the systems needed to keep things secure. Owners are only responsible for classifying their information..
0
0