The Chief Executive Officer (CEO) of a quoted company has visited the company's Information Technology...

CIMA P3 Question Answer

The Chief Executive Officer (CEO) of a quoted company has visited the company's Information Technology (IT) Centre in order to meet with the Head of IT. The CEO was concerned to discover that the door to the IT Centre was unlocked, even though the receptionist was not at their desk.

Which THREE of the following are correct?

The CEO should inform the Head of IT of the security breach.

The CEO should accept that this may have been an isolated incident

The CEO should leave IT security to the Head of IT.

The CEO should have locked the door and taken no further action

The CEO should notify the Head of Internal Audit of the breach.

The CEO should initiate disciplinary action against the receptionist