Certified Information Security Manager (CISM) — Question 909

Which of the following business units should own the data that populates an identity management system?

Answer options

• A. Legal
• B. Human resources (HR)
• C. Information security
• D. Information technology

Correct answer: B

Explanation

The Human resources (HR) department is the most suitable choice for owning the data that populates an identity management system, as they manage employee records and related personal information. The other options, while important, do not directly handle the comprehensive employee data required for identity management.