"A." As others are NOT accountable for Privacy Mgmt Program. Thanks ------------------------------ Deepak Ohri Security & Compliance Leader ------------------------------

A. The first line of defense - Management responsible for self assessment and adequacy of controls. Second layer looks at emerging risks and third one performs independent assessment of cyber compliance and internal controls testing. ------------------------------ ...

Hi Chetan, Personally i think this is a bad idea if set by senior management, it will lead to poor reporting on cybersecurity incidents. This is based on my personal experience. My thoughts is, lesson learned from the cyber incidents should not reoccur ...