Cybersecurity governance should be treated as a one-time technical project that ends after security tools are installed.

### Why this is right The statement is false because governance requires ongoing direction, oversight, reporting, and adjustment. Installing tools does not define accountability or ensure that risks and obligations remain under review. ### The concept Governance connects security activity to organizational decisions. Threats, technology, business operations, and compliance obligations can change, so leaders need continuing information and review. The company profiles illustrate this through needs such as updated risk communication, clearer roles, and lessons from incidents. ### The other options - **True**: This would describe a one-time implementation project, not ongoing governance. Tools can support security, but they do not substitute for leadership oversight or continuous improvement. ### Terms - **Governance**: The roles, rules, and processes used to direct and oversee an organization. ### Remember Tools are implemented; governance is maintained.