Template - Management Responsibilities Interview Questions

Related control

A.5.4 Management Responsibilities

Ask managers

• What are your information security responsibilities?
• How do you ensure your team follows information security policies?
• How do you know your team completed required training?
• What do you do if someone does not follow security procedures?
• How do you communicate security expectations?
• How do you handle security incidents or weaknesses reported by staff?
• Do you have any security objectives or KPIs?
• How do you ensure contractors under your supervision follow security requirements?

Ask employees

• Does your manager discuss information security expectations?
• What happens if someone violates a security procedure?
• Are you encouraged to report incidents or suspicious activity?
• Do senior people follow the same security rules?
• Do you know where to find security policies?
• Do you feel security is treated as part of your job?

Ask security leadership

• How do you ensure managers understand their security responsibilities?
• How do you track manager follow-up on training, incidents, and policy compliance?
• How are repeated non-compliances escalated?
• How do managers contribute to improving security culture?
• Are security responsibilities included in management performance objectives?