ISC2 CISSP Practice Question

A centralized asset management program with distributed responsibility is the BEST approach because it combines centralized oversight with localized control. This approach maintains consistency through standardized policies, procedures, and systems while acknowledging that different regions or business units may have unique requirements or regulatory considerations that need local expertise. The centralized component ensures unified governance, consistent risk management, and enterprise-wide visibility, while the distributed responsibility enables practical implementation that accounts for regional variations. This balance addresses both strategic and tactical needs of effective asset management.

The other options are less effective: A purely centralized approach would lack flexibility for regional requirements; a decentralized approach would create inconsistencies and gaps in protection; and outsourcing asset management transfers control to a third party, potentially increasing risk and reducing visibility into asset handling practices.