(ISC)2 Certified in Cybersecurity Practice Exam

What is the role of a security governance committee?

1. To establish the organization's budget for security

2. To oversee the security program and align with business goals

3. To conduct daily security incident reviews

4. To manage the organization's IT infrastructure

The correct answer is: To oversee the security program and align with business goals

The role of a security governance committee is crucial for ensuring that an organization's security strategies and practices align with its overall business objectives. This committee exists to provide oversight of the security program, ensuring that it not only protects the organization's assets and data but also supports the organization's mission and goals. By aligning security practices with business goals, the committee facilitates informed decision-making and prioritization of initiatives that address both security risks and business needs. This alignment is essential for the effective allocation of resources and for gaining support from executive leadership, thereby ensuring that security is not seen as a separate or secondary function, but rather as integral to the organization's success. In contrast, other functions like establishing a budget, conducting daily security incident reviews, or managing IT infrastructure may fall under the responsibilities of specific teams or roles within the organization. These functions are more tactical in nature, while the governance committee focuses on strategic oversight and alignment, making option B the most appropriate choice.