A company installs a new security product but assigns no owner, sets no policy, and does not review its performance. Which conclusion best follows from the course material?

### Why this is right Governance includes technology integration, but it also requires policies, processes, leadership, accountability, and continuous monitoring. The scenario describes a product without those organizational supports. ### The concept A security product may help detect or prevent particular threats. Governance determines how such technology fits the organization's objectives, who is responsible for it, and how its effectiveness is reviewed. A product is therefore one component, not a complete governance framework. ### The other options - **B. The company has completed continuous improvement**: No review or adjustment is described. - **C. The product replaces leadership accountability**: Technology cannot assign organizational responsibility. - **D. The company no longer needs risk management**: Risk management remains a named governance element. ### Remember A tool without policy, ownership, and review is not a governance framework.