A company has unclear cybersecurity leadership roles and assumes the information technology department owns all security decisions. Explain two governance risks and recommend improvements.
Answer
Risks include unowned responsibilities, delayed escalation, and business departments failing to manage risks within their operations. Improvements include defining leadership and departmental responsibilities, clarifying the cybersecurity leader's reporting route, communicating decision authority, and using audits or reviews to check whether responsibilities are followed.
Explanation
### What a good answer covers
- Identify the risk that tasks or decisions may have no clear owner.
- Explain that concerns may not reach decision-makers promptly.
- Note that treating security as solely an information technology concern excludes other departments.
- Recommend clear roles, reporting lines, communication, and review.
### The concept
Governance depends on assigning work and decisions to people who can carry them out. NovaTech and BuildSphere illustrate problems that arise when reporting or leadership roles are unclear. Cybersecurity also affects business processes outside information technology, so other departments need defined responsibilities. Audits can check whether policies and assigned roles are being followed.
### Terms
- **Decision authority**: The formal ability to make or approve a decision.
- **Escalation**: Passing a concern to someone with authority to decide or act.
### Remember
Clear roles prevent ownership gaps, but they work only when people know and follow them.
Related Questions
- Outsourcing payment processing to a third-party vendor completely transfers all regulatory compliance and data protection responsibilities away from the hiring organization.(intermediate)
- In an incident management exercise divided into discovery, investigation, response, and recovery, the phase focused on analyzing logs, alerts, and evidence to examine unauthorized activity is called _____.(basic)
- The recovery and compliance review phase can include a mock audit, ongoing monitoring, staff training, and improvements informed by the incident.(basic)
- A staff member accesses the billing system from an unprotected personal laptop, and suspicious activity alerts appear. Which response area is most directly implicated by this new information?(intermediate)
- During a tabletop incident response exercise involving potential payment card data compromise, which activity is the primary focus of the Discovery phase?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free