Security Roles and Responsibilities

Question 1

Roles and Responsibilities

Answer 1

• Ownership of assets
• Access to assets
• Use of assets
• Managers

Question 2

Ownership of assets

Answer 2

Individual assets and groups of assets need to have designated owners who are responsible for their operation and protection.

Question 3

Access to assets

Answer 3

The owners of assets should be designated as the persons who decide who may access or use those assets.

Question 4

Use of assets

Answer 4

All employees should be explicitly designated as responsible for their individual use of assets.

Question 5

Managers

Answer 5

Managers should be designated as being responsible for the behaviour of employees under their control.

Question 6

SLA

Answer 6

Service Level Agreement is a formally defined level of service provided by an organisation.
They can be defined for many activities:
- Security incident response
- Security alert delivery
- Security investigation
- Policy and procedure review

Question 7

Risks associated with outsourcing

Answer 7

• Control of confidential information
• Loss of control
• Accountability