Who is responsible for monitoring compliance with security policies within an organization?

• A. IT department
• B. Security contact
• C. Data analyst
• D. All employees

Answer: (B)

The individual designated as the security contact is primarily responsible for monitoring compliance with security policies within an organization. This role typically involves overseeing the implementation of security measures, ensuring that policies are followed, and assessing risks to maintain the integrity and confidentiality of organizational data. The security contact acts as a liaison between various departments and management, helping to enforce security protocols and address any issues that arise.

While other roles, such as the IT department, contribute to maintaining security infrastructure and implementing technology solutions for compliance, the accountability for monitoring adherence to specific security policies generally falls under the purview of the security contact. Their specialized training and focus on security matters enable them to effectively assess compliance and react to any security-related incidents.

Additionally, while all employees play a role in maintaining security through their actions and adherence to policies, the primary responsibility for monitoring and compliance oversight rests with the designated security contact, making this option the most appropriate choice.