Assessing Corporate Cybersecurityintermediate
Explain how executive leadership, the information technology department, other departments, and auditors contribute different forms of accountability.
Answer
Executive leadership establishes the cybersecurity governance framework and communicates its importance. The information technology department follows security protocols and regularly updates systems. Other departments participate in collaborative security decisions because cybersecurity affects the organization as a whole. Internal or external auditors review accountability and compliance and help identify areas for improvement.
Explanation
### Why this is right
The answer assigns each group the role described in the course instead of treating accountability as one person's or department's duty. These roles connect direction, implementation, collaboration, and review.
### The concept
A decision hierarchy helps clarify who sets expectations and who carries them out. Executive leadership provides direction; information technology staff have operational duties; other departments contribute to decisions affecting their work; auditors independently review adherence and identify possible improvements. These responsibilities complement each other rather than compete.
### What a good answer covers
- Leaders establish and communicate the framework.
- Information technology staff follow protocols and update systems.
- Departments collaborate because cybersecurity is organization-wide.
- Audits review accountability and compliance.
### Remember
Separate who directs, who implements, who collaborates, and who reviews.
Related Questions
- Outsourcing payment processing to a third-party vendor completely transfers all regulatory compliance and data protection responsibilities away from the hiring organization.(intermediate)
- In an incident management exercise divided into discovery, investigation, response, and recovery, the phase focused on analyzing logs, alerts, and evidence to examine unauthorized activity is called _____.(basic)
- The recovery and compliance review phase can include a mock audit, ongoing monitoring, staff training, and improvements informed by the incident.(basic)
- A staff member accesses the billing system from an unprotected personal laptop, and suspicious activity alerts appear. Which response area is most directly implicated by this new information?(intermediate)
- During a tabletop incident response exercise involving potential payment card data compromise, which activity is the primary focus of the Discovery phase?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free