Discuss the conditions required to have proper accountability.

Question

What will be an ideal response?

Answer 1

Proper accountability requires three conditions. The first condition is that the various roles necessary to ensure security are assigned and understood among all staff and management and that the overall responsibilities are assigned for each role and then placed within an accountability system. The second condition requires a complete and correct set of best practices and control objectives, which are implemented by a clear-cut set of procedures. These procedures must be clearly and unambiguously defined, documented, and tailored to fit the entire range of known security needs of the organization. The third condition requires that the practices that have been selected as "best practices" are accompanied by an objective and valid set of metrics. These quantitative measures have to characterize the ongoing performance of the security function.