The assignment for monitoring and analyzing security alerts and distributing to appropriate information security and business unit management personnel is formally assigned to which role?

• A. Chief Information Security Officer or security-knowledgeable management member
• B. Marketing director
• C. External auditor
• D. Front-line supervisor

Answer: (A)

Assigning responsibility for monitoring and analyzing security alerts and distributing them to the right information security and business-unit management personnel sits with the Chief Information Security Officer or another security-knowledgeable member of management. This role carries the authority and accountability to triage alerts, determine severity, and ensure timely, accurate escalation to both technical responders and business leaders. Having a senior security leader own this process creates a clear chain of command, consistent incident response communication, and alignment with organizational risk management and PCI DSS requirements.

Marketing director lacks the security expertise and authority to manage alerts across the organization. An external auditor is focused on reviewing controls and may assess the process, but does not usually own ongoing alert monitoring or distribution. A front-line supervisor handles daily operations but typically does not have responsibility for enterprise-wide security alert escalation and governance.