Governance, risk and compliance · Question 3 of 12
Who is ultimately accountable for a company's information security?
1 answer is correct. Easy
Show answer
Answer
- D Senior management
Explanation
Management can delegate tasks, but not overall accountability. It sets goals, risk appetite and budget and oversees implementation. Laws such as NIS2 explicitly emphasize this accountability.