Security and Risk Management
Question #195
Which action best indicates that a company is proactively embedding security into its core operational processes at an executive level?
A. Implementing an Information Security Management System (ISMS).
B. Appointing a Data Protection Officer (DPO).
C. Achieving ISO 27001 certification.
D. Hiring a Chief Security Officer (CSO) to lead security initiatives.
Domain Concept: Security and Risk Management
This scenario evaluates management-level decision making in Security and Risk Management. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.