Free Preparation Discussions
MENU
ISC2 Exam ISSEP Topic 1 Question 73 Discussion
Topic #: 1
Which of the following individuals are part of the senior management and are responsible for authorization of individual systems, approving enterprise solutions, establishing security policies, providing funds, and maintaining an understanding of risks at all levels? Each correct answer represents a complete solution. Choose all that apply.
Authorizing Official, AO Designated Representative (AODR), Chief Information Officer (CIO), and
Senior Information Security Officer (SISO) are part of the senior management. These individuals are
responsible for the following:
Authorization of individual systems
Approving enterprise solutions
Establishing security policies
Providing funds
Maintaining an understanding of risk at all levels
Answer option D is incorrect. A User Representative is not a part of the senior management in the
Authorization process.
Currently there are no comments in this discussion, be the first to comment!