Week 4 - Information Assurance Planning

Which stakeholder holds the ultimate oversight and accountability for an organization's security posture?

• Executive Leadership

• IT Department

• CISO

• Board of Directors

Who is primarily responsible for setting priorities and allocating resources for security initiatives?

• Executive Leadership

• Security Managers

• Data Custodians

• External Consultants

Which group acts as the first line of defense against security threats?

• Security Technicians

• Regular Employees

• Data Custodians

• Security Managers

Which stakeholder is responsible for ensuring compliance with data protection regulations?

• Board of Directors

• Data Owners

• Legal Team

• Security Technicians

Which stakeholder indirectly influences security practices through industry standards and competitive pressure?

• External Consultants

• Competitors

• Researchers

• Regulators

Who is primarily responsible for implementing and maintaining technical security measures?

• IT Department

• Data Owners

• Executive Leadership

• Regular Employees

Which stakeholder provides specialized expertise for testing and improving security?

• Legal Team

• Regular Employees

• External Consultants

• Competitors

Who typically makes decisions about what information is confidential and who should have access to it?

• Security Managers

• Data Owners

• CISO

• Data Custodians

Which of the following would be classified as a strategic planning initiative?

• Schedule monthly security lunch-and-learns

• Conduct weekly vulnerability scans

• Implement a GRC platform

• Establish a mature security governance framework by 2025

Which planning level typically looks 3-5 years into the future?

• Operational planning

• Tactical planning

• Strategic planning

• Project planning