Which of the following is an information security governance responsibility of the Chief Security Officer?
A) Communicate policies and the program
B) Set security policy, procedures, programs and training
C) Brief the board, customers and the public
D) Implement policy, report security vulnerabilities and breaches

Question

Quizplus · Accepted Answer

The Chief Security Officer (CSO) is responsible for setting security policy, procedures, programs and training. Communicating policies and the program, briefing the board, customers, and the public, as well as implementing policy and reporting security vulnerabilities and breaches are other responsibilities that may fall on the CSO but are not exclusive to their role in information security governance.

Which of the Following Is an Information Security Governance Responsibility