CERTIFIED-IN-CYBERSECURITY · Question #560
Which of the following best describes a robust security awareness training program?
The correct answer is A. A combination of education, training, and awareness activities. A robust security awareness program is not a single-dimensional effort. NIST and other security frameworks describe it as a three-part model: Awareness (creating consciousness of security risks), Training (developing specific skills to perform security-related tasks), and…
Question
Which of the following best describes a robust security awareness training program?
Options
- AA combination of education, training, and awareness activities
- BEducating about potential threats
- CPractical training on how to handle threats
- DAwareness activities
How the community answered
(18 responses)- A94% (17)
- B6% (1)
Explanation
A robust security awareness program is not a single-dimensional effort. NIST and other security frameworks describe it as a three-part model: Awareness (creating consciousness of security risks), Training (developing specific skills to perform security-related tasks), and Education (building deeper understanding and judgment). Using only one of these three components (B, C, or D individually) produces gaps - for example, awareness without training leaves employees unable to act, and training without education makes it harder to handle novel threats. The combination addresses knowledge, skills, and behavior change.
Topics
Community Discussion
No community discussion yet for this question.