Which of the following is critical in creating a security program aligned with an organization's goals?

Question

Options

• AEnsure security budgets enable technical acquisition and resource allocation based on internal
• BDevelop a culture in which users, managers and IT professionals all make good decisions about
• CProvide clear communication of security program support requirements and audit schedules
• DCreate security awareness programs that include clear definition of security program goals and

• A
  16% (10)
• B
  70% (43)
• C
  5% (3)
• D
  8% (5)

Explanation

Building a security culture (B) is the foundation of any effective security program because technology and processes ultimately depend on human behavior - when users, managers, and IT professionals consistently make sound security decisions, the program aligns naturally with organizational goals rather than working against them.

Why the distractors fall short:

• A focuses on budget and resource acquisition, which supports security but is a means, not the strategic alignment mechanism itself.
• C addresses communication of audit schedules, which is an operational activity, not a driver of goal alignment.
• D describes awareness programs with goal definitions - closer, but awareness training is a tool to build culture, not the culture itself; B captures the broader, more complete outcome.

Memory tip: Think "People, Process, Technology" - the classic security triad always starts with people. When an exam question asks what's critical for alignment with organizational goals, the answer almost always points to the human/cultural layer (B) rather than technical or procedural specifics.

No community discussion yet for this question.