Which arrangement best provides backing from the IT department for security?

• A. Placing security within the IT department
• B. Keeping security in a separate, independent unit
• C. Outsourcing security
• D. None

Answer: (A)

Embedding security within the IT organization ensures that security efforts are part of daily operations and receive direct support from those who manage and maintain the systems. When security sits inside IT, it can participate in planning, change management, and budgeting, so safeguards are funded and implemented as part of standard workflows rather than as an add-on. This alignment reduces friction between security and operations, improving timely patching, configuration management, access controls, and incident response, and it clarifies accountability for enforcing policies. Keeping security as a separate unit can create silos and slower decision-making, making it harder for security to influence IT projects or obtain needed resources. Outsourcing might reduce internal workload but often sacrifices deep integration, visibility, and ongoing accountability within the IT ecosystem. So, integrating security into IT provides the strongest, sustained backing and practical execution of security measures.