Who should be involved, among others, in the draft, review, and validation of information security procedures?
Who should be involved, among others, in the draft, review, and validation of information security procedures?
The answer here is actually C Based on the PECB documentation Employees in charge of operations should be involved in drafting, reviewing and validating the content of such procedures and policies. See page 40 - Prepare for the implementation of controls
Just double checked this and C is def the answer. B is wrong. information security committee: The info sec com consists of reps from various divisions within the organisation. The role is to ensure coordination and cooperation if info sec within the Org