Which of the following is NOT a responsibility of the information security manager (ISM) within...

The responsibility of allocating resources dedicated to the cybersecurity program typically falls to senior management or the executive leadership, rather than the information security manager (ISM). The ISM's role is more focused on supervising the cybersecurity program, developing metrics, and ensuring the effectiveness of security controls.

References:

ISO/IEC 27001:2013- Outlines the responsibilities of the ISM, including the supervision of the ISMS and the development of metrics for evaluating control effectiveness, but does not typically include resource allocation.

NIST SP 800-53- Discusses the roles and responsibilities within an organization's security framework, delineating the management of resources as a responsibility of senior leadership rather than the ISM.