Question 34 Q: 34 Which statement regarding organizational roles, responsibilities, and authorities is NOT correct? Options A: Top management is responsible for reporting on the performance of the ISMS and cannot assign this responsibility to someone else B: A project manager can have information security responsibilities as well C: Top management must assign the responsibility for ensuring that the ISMS conforms to ISO/IEC 27001 Save Question Show Answer Discussion 8 Clear Discussion Most voted Newest No comments yet. Be the first to comment. Post Be respectful. No spam. Correct Answer: A
