nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #195

Which of the following best describes the PRIMARY goal of Security Awareness activities within an organization?

The correct answer is B. Attract attention to security issues and concerns. Security Awareness is the first tier of a three-tier security education model: Awareness → Training → Education. Its PRIMARY goal is to capture employees' attention and make them conscious that security issues exist - it is not about teaching skills or deep understanding. Think…

Security Principles

Question

Which of the following best describes the PRIMARY goal of Security Awareness activities within an organization?

Options

  • AFocus just on complex security workflows.
  • BAttract attention to security issues and concerns
  • CBuild proficiency in a specific set of security skills or actions.
  • DImprove the understanding of security principles and their application in various situations.

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    96% (27)

Explanation

Security Awareness is the first tier of a three-tier security education model: Awareness → Training → Education. Its PRIMARY goal is to capture employees' attention and make them conscious that security issues exist - it is not about teaching skills or deep understanding. Think of it as 'making people notice the signs.' Building specific skills is the goal of Security Training (option C). Improving understanding and application is the goal of Security Education (option D). Option A is incorrect because awareness is meant to be broad and simple, not focused on complex workflows.

Topics

#Security Awareness#Human Factors#Organizational Security#Security Programs

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice