CISM Certified Information Security Manager – Question0874

The PRIMARY reason for defining the information security roles and responsibilities of staff throughout an organization is to:

A.
reinforce the need for training
B. increase corporate accountability
C. comply with security policy
D. enforce individual accountability

Correct Answer: C