Placing security within IT ________.

• A. creates independence
• B. is likely to give security stronger backing from the IT department
• C. Both A and B
• D. Neither A nor B

Answer: (B)

Placing security within IT integrates security into everyday technology operations, giving it visibility, authority, and access to the resources it needs. When security sits in the IT structure, IT leadership can champion security initiatives, align them with technology projects, and ensure funding and staffing across systems. This close integration makes security decisions feel part of the standard IT processes, which strengthens backing from the IT department and helps implement consistent controls and faster responses.

Independence from IT tends to create silos, making it harder to coordinate changes, enforce policies, and secure the necessary resources. That friction can weaken overall support for security initiatives, even if the intent is neutrality. Therefore, placing security within IT is the approach most likely to gain stronger IT backing.