Providing information security for the information and information systems that support the operations and assets under their control is the primary responsibility of which group under the InfoSec governance framework?
A) Board of directors/trustees
B) Senior executives
C) Senior managers
D) All employees and users

Question

Quizplus · Accepted Answer

Senior managers are typically responsible for implementing and enforcing information security policies and procedures within the specific areas of the organization that they oversee. They are responsible for ensuring that information security controls are in place and are effective in protecting the organization's assets and operations. While all employees and users have a role to play in maintaining information security, it is typically the responsibility of senior executives and managers to ensure that the necessary measures are in place and are being effectively implemented. The board of directors/trustees has overall responsibility for governance and strategic direction, but may delegate the day-to-day responsibility for information security to senior management.

Providing Information Security for the Information and Information Systems That