Explain why it is a mistake to shift the responsibility for cybersecurity from senior management to the managerial level.

What will be an ideal response?

That is a mistake, because nobody at the managerial level has the authority to enforce security outside of their own areas. As a result, the assurance measures that are implemented by managers for their areas are likely to represent a piecemeal, and therefore exploitable, defense.