The people that manage security for the organization should not be same people that conduct risk analysis.

Question

Quizplus · Accepted Answer

The people who manage security for an organization can also conduct risk analysis as they are typically well-versed in the organization's security posture and potential vulnerabilities. However, it's beneficial to have diverse perspectives, including external audits, to ensure comprehensive risk assessment.

The People That Manage Security for the Organization Should Not