A Chief Information Security Officer (CISO) Is Creating a Security

Multiple Choice

A Chief Information Security Officer (CISO) is creating a security committee involving multiple business units of the corporation. Which of the following is the BEST justification to ensure collaboration across business units?

A) A risk to one business unit is a risk avoided by all business units, and liberal BYOD policies create new and unexpected avenues for attackers to exploit enterprises.
B) A single point of coordination is required to ensure cybersecurity issues are addressed in protected, compartmentalized groups.
C) Without business unit collaboration, risks introduced by one unit that affect another unit may go without compensating controls.
D) The CISO is uniquely positioned to control the flow of vulnerability information between business units.