Câu 7: ITIL 4 Specialist: Collaborate, Assure and Improve

A large organization has a small centralized information security management team, but most information security work is devolved to the many independent product teams. The central team defines policy, and makes recommendations about tools and automation, but each product team makes its own decisions about how to meet the policy. What is the BEST approach to ensure information security is managed consistently across this organization?

1. A. Security experts in the product teams should report directly to the centralized information security management team
2. B. The centralized team should create an information security center of excellence to help the security experts collaborate — đáp án hiện tại
3. C. The centralized team should produce detailed process documentation to be followed by all product teams
4. D. The organization should adopt a security standard such as ISO/IEC 27001 and enforce its use across the product teams