Question

Every security control in a security control baseline is accounted for by the organization. The organization is also known as which of the following?

A) System administrator
B) Oversight committee
C) Responsible party
D) Control owner

Answer 1

The organization that accounts for every security control in a security control baseline is known as the Control owner. They are responsible for implementing and maintaining security controls and managing risks associated with their assigned assets. The correct answer is option D.

Step-by-step explanation:

When every security control in a security control baseline is accounted for by the organization, the organization fulfills the role of what is known as the Control owner. The Control owner is responsible for ensuring that all security controls are correctly implemented and maintained within their systems. They are tasked with managing the risks associated with the assets for which they are responsible, and they typically hold the authority to make decisions regarding the security controls in question.