Which of the following would be the GREATEST obstacle for effective implementation of an enterprise's information security policy?

Corporate culture significantly impacts how employees perceive and adhere to information security policies. A culture that lacks security awareness, discourages reporting incidents, or prioritizes convenience over security can undermine even the most well-designed policies, leading to non-compliance and increased risk. Human factors are frequently cited as the weakest link in security.

Threats to corporate information are external factors that information security policies aim to address, but they are not an obstacle to the *implementation* of the policy itself; rather, a well-implemented policy helps mitigate threats.

While cloud-based applications introduce new security challenges, these are technical and architectural considerations that can be addressed within the policy and its implementation strategy, rather than a fundamental obstacle to policy adoption itself.

Geographically dispersed staff can add complexity to policy implementation and enforcement, but this is a logistical challenge that can be overcome with appropriate training, technology, and communication, whereas a resistant culture presents a deeper, more pervasive barrier.