ITPEC FE Morning October 2023 Question 75
Which of the following is an officer whose primary responsibility is the security of a company’s information and data?
Explanation
CISO — the Chief Information Security Officer is the executive responsible for protecting the company's information and data.
The CISO sets the information security policy, leads the security organisation and risk management, and answers for incidents. The role is often separate from the CIO so that security is not traded away for IT delivery goals.
Answer (c)
Why not others:
- •(a) CCO — Chief Compliance Officer, responsible for compliance with laws, regulations and internal rules
- •(b) CIO — Chief Information Officer, responsible for IT strategy and the use of information systems as a whole, not specifically for security
- •(d) COO — Chief Operating Officer, responsible for running day-to-day business operations
Key rule: Read a C-level title from its middle letters: I for information, IS for information security, C for compliance, O for operations, F for finance.
Corporate Activities · AI-written, may contain errors
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.