Match each security role to its primary responsibility.
Drag a concept onto its matching description — or click a concept then click the description.
Senior executive responsible for security strategy
Oversees daily security operations and team
Designs security infrastructure and controls
Evaluates compliance and effectiveness of controls
Executes incident response procedures
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
CISO: Responsible for overall security strategy and program management.
Correct matches: CISO → overall strategy, Security Manager → daily operations, Security Architect → design, Security Auditor → evaluation. Common confusions involve swapping these responsibilities.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
CISO: Responsible for overall security strategy and program management.
Why this is correct
The CISO is the senior executive responsible for the information security program.
Security Manager: Oversees daily security operations and manages security team.
Why this is correct
The Security Manager handles day-to-day operations and team management.
Security Architect: Designs and implements security architecture and controls.
Why this is correct
The Security Architect is responsible for designing security solutions.
Security Auditor: Evaluates security controls and ensures compliance.
Why this is correct
The Security Auditor independently reviews controls and compliance.
CISO: Evaluates security controls and ensures compliance.
Why it's wrong here
Incorrect — evaluating controls is the role of the Security Auditor.
Security Manager: Designs security architecture.
Why it's wrong here
Incorrect — designing architecture is the responsibility of the Security Architect.
Go deeper
About these practice questions
Courseiva writes every CISM question from scratch — 871 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISM practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISM exam.