Answer is D: Members are business risk owners. Because business risk owners are the people who are accountable for outcomes, they can make informed decisions about acceptable risk levels and they can align security initiatives with business priorities and risk appetite.
The most important part of steering committee is to have representatives that cover multiple functions across the organization. If you dont have this then there will be a lack of advocates in certain divisions of the business.
D. Members are business risk owners: Information security is not just an IT issue; it's a business issue. Business leaders who are also risk owners have a deep understanding of the organization's overall objectives, priorities, and risk appetite. When these leaders are involved in the information security governance committee, decisions related to security measures are more likely to align with the broader business strategy, and there is a better chance of achieving a balance between security and business objectives.
Good to see a discussion for the first time on this forum.
upvoted 2 times
...
...
...
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
SHERLOCKAWS
4 days ago03allen
9 months, 1 week agoshootnot
10 months, 4 weeks agoyottabyte
1 year agoPOWNED
1 year, 2 months agoxcjxcj
1 year agoTamerBeSafe
1 year, 2 months agorichck102
1 year, 9 months agoccKane
2 years agocangurer
2 years agocosmo4ng
1 year, 11 months agoCISSPST
1 year, 6 months ago