(ISC)2 Certified in Cybersecurity Practice Exam

Which body oversees the creation of organizational policies?

1. IT department

2. Executive Board

3. Senior management

4. Legal department

The correct answer is: Senior management

The senior management of an organization plays a crucial role in overseeing the creation of organizational policies. This level of management is responsible for setting the strategic direction and ensuring that policies align with the organization's goals and objectives. They understand the broader implications of policies and can consider various perspectives, including compliance, risk management, and resource allocation. Senior management typically has the authority to make decisions that affect the entire organization, allowing them to craft policies that not only address immediate needs but also support long-term strategy. They can incorporate inputs from various departments, making sure that the policies are comprehensive and have the necessary buy-in from different parts of the organization. This leadership ensures the policies are enforceable and effectively implemented throughout the organization, which is vital for maintaining governance and operational integrity. While the IT department may develop specific technical policies or procedures, and the legal department may offer guidance on compliance and regulatory issues, they do not have the overarching strategic viewpoint that senior management possesses. Additionally, while the executive board provides oversight and direction at a high level, it is the senior management that actively engages in policy creation.