Which of the following is an information security governance responsibility of the organization's employees?
A) Communicate policies and the program
B) Set security policy, procedures, programs and training for the organization
C) Brief the board, customers and the public
D) Implement policy, report security vulnerabilities and breaches

Question

Quizplus · Accepted Answer

Implementing policy, reporting security vulnerabilities and breaches is a responsibility of the organization's employees. A is the responsibility of senior management while B is the responsibility of the information security governance committee. C is the responsibility of senior management or public relations department.

Which of the Following Is an Information Security Governance Responsibility