Table 2-2 Responsible, Accountable, Consulted, Informed (RACI) Matrix
Management Practice | Board of Directors | Corporate Executives | Chief Digital Officer | LOB executives | Chief Risk Officer | CIO | CISO | Human Resources (HR) | Compliance and Audit | Security Ops Manager | EA/ARB | CTO/Dev | IT Operations | Service Manager | Security Incident Response | Business Continuity |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Maximize IT business value | A | R | R | R | I | R | I | Â | C | Â | C | I | I | I | Â | Â |
Ensure risks are managed | A | R | I | R | R | R | C | C | C | I | C | I | I | I | I | I |
Manage security program | Â | C | Â | C | C | R | A | Â | C | R | I | I | I | I | C | C |
Manage security operations | Â | Â | Â | I | I | C | A | Â | C | R | I | C | R | R | R | I |