Question

________ is part of the executive management team’s responsibility for protecting an organization’s information assets.

A. C-I-A triad
B. information security governance
C. risk management
D. A-I-C triad

Answer 1

B) Information security governance

Step-by-step explanation:

Information security governance is the process by which the information security activities of an organisation are controlled and directed.

Information security governance aims at providing direction to the executive management to implement a security program that ensures sufficient security to protect the information assets of an organisation. It consists of;

- Alignment of information security strategies and objectives with business strategies and objectives.

- Ensuring that risks are properly addressed.

- Promoting a positive security environment.

- Ensuring compliance with internal and external security requirements.