Who maintains a site's security response and what is involved in the maintenance of correct alignments?

Question

What will be an ideal response?

Answer 1

The IT security professional maintains the site's security response in alignment with all company-wide, risk-based security policies, plans, and procedures. The maintenance of correct alignment requires each individual IT security professional to be able to map the organization's risk management practices down to the appropriate set of standards, policies, regulations, and laws. The IT security professional then develops and applies the necessary controls to establish the concrete risk management program for each setting.