Câu 20: GSLC: GIAC Security Leadership

The model for the Three Lines of Defense in Effective Risk Management and Control prescribes which of the following?

1. A. Risk Owners in the second line of defense should not delegate the day-to-day management of security controls — đáp án hiện tại
2. B. Security teams should have complete responsibility for implementing security controls that catch unexpected events
3. C. Internal auditors have a high level of independence that is not available in the second line of defense
4. D. Risk Control and Compliance personnel can offer completely independent analysis to governing bodies in the final line of defense