Podcast
Questions and Answers
What is the primary responsibility of the information custodians/business owner?
What is the primary responsibility of the information custodians/business owner?
- Providing legal input
- Advising the committee on compliance risk
- Advising on risk from strategic, financial, operational, reputational, and compliance perspectives
- Communicating business initiatives that may impact information security (correct)
Which role is responsible for ensuring the successful completion of a project?
Which role is responsible for ensuring the successful completion of a project?
- Responsible
- Consulted
- Accountable (correct)
- Informed
Which role is expected to deliver or submit the assigned work portion within given deadlines?
Which role is expected to deliver or submit the assigned work portion within given deadlines?
- Consulted
- Informed
- Responsible (correct)
- Accountable
What is the primary responsibility of the CRO (Chief Risk Officer)?
What is the primary responsibility of the CRO (Chief Risk Officer)?
Which role is expected to be consulted prior to a decision or action?
Which role is expected to be consulted prior to a decision or action?
Which role is expected to be informed of decision making or actions after they occur?
Which role is expected to be informed of decision making or actions after they occur?
What is the primary role of the CISO?
What is the primary role of the CISO?
What is the primary focus of the Information Security Steering (ISS) committee?
What is the primary focus of the Information Security Steering (ISS) committee?
Which of the following is NOT a suggested member of the ISS committee?
Which of the following is NOT a suggested member of the ISS committee?
What is the primary responsibility of the information custodians/business owners in the ISS committee?
What is the primary responsibility of the information custodians/business owners in the ISS committee?
Which of the following is a suggested member of the Enterprise Risk Management (ERM) committee?
Which of the following is a suggested member of the Enterprise Risk Management (ERM) committee?
What is the primary role of the CISO in the ERM committee?
What is the primary role of the CISO in the ERM committee?
