Certified SOC Analyst (CSA) — Question 92

InfoSystem LLC, a US-based company, is establishing an in-house SOC. John has been given the responsibility to finalize strategy, policies, and procedures for the SOC.
Identify the job role of John.

Answer options

• A. Security Analyst – L1
• B. Chief Information Security Officer (CISO)
• C. Security Engineer
• D. Security Analyst – L2

Correct answer: B

Explanation

The correct answer is B, Chief Information Security Officer (CISO), as this role is responsible for overseeing the strategy and policies related to information security within the organization. The other options, such as Security Analyst – L1 and L2, and Security Engineer, typically focus on operational tasks rather than the high-level strategic responsibilities that John has been assigned.