Which statement best distinguishes board oversight from operational cybersecurity work?

### Why this is right Governance separates oversight from execution. The board and executive leadership provide direction and review significant risks, while operational teams carry out their assigned security work. ### The concept Oversight helps leaders check that risk is understood and managed. Operational execution involves applying expectations and controls in daily work. The roles need to communicate, but they are not interchangeable. Employing a cybersecurity leader does not remove the board's governance role or the responsibilities of other departments. ### The other options - **B. The board configures every security system, while staff only report results**: this reverses the distinction between governance oversight and technical execution. - **C. The board has no cybersecurity role if the company employs a cybersecurity leader**: leadership roles support governance but do not eliminate board oversight. - **D. Operational teams set all enterprise risk priorities without leadership involvement**: enterprise risk and business priorities require leadership direction. ### Terms - **Operational team**: A group that carries out day-to-day organizational work. - **Oversight**: Review and direction intended to ensure responsibilities and risks are managed. ### Remember Leaders oversee and direct; operational teams execute assigned work.