Which of the following is the STRONGEST indication an organization has ethics management issues?

A. Employees face sanctions for not signing the organization's acceptable use policy.

B. The organization has only two lines of defense.

C. Internal IT auditors report to the chief information security officer (CISO).

D. Employees do not report IT risk issues for fear of consequences.








 

Suggested Answer: D



This question is in CRISC exam 
For getting Risk and Information Systems Control Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to ISACA.