CGRC · Question #685
Which of the following approaches can be used to build a security program? Each correct answer represents a complete solution. Choose all that apply. Response:
The correct answer is A. Bottom-Up Approach C. Top-Down Approach. Security programs can be effectively built using both a top-down approach, driven by management and organizational policies, and a bottom-up approach, which focuses on technical implementations and operational realities.
Question
Which of the following approaches can be used to build a security program? Each correct answer represents a complete solution. Choose all that apply. Response:
Options
- ABottom-Up Approach
- BRight-Up Approach
- CTop-Down Approach
- DLeft-Up Approach
How the community answered
(41 responses)- A95% (39)
- B2% (1)
- D2% (1)
Why each option
Security programs can be effectively built using both a top-down approach, driven by management and organizational policies, and a bottom-up approach, which focuses on technical implementations and operational realities.
The bottom-up approach to building a security program starts with the technical implementations and operational details, often driven by technical staff addressing specific vulnerabilities and threats. This approach builds security from the ground up, focusing on individual components and then integrating them into a larger program.
'Right-Up Approach' is not a recognized methodology for building a security program.
The top-down approach to building a security program is initiated and supported by upper management, stemming from organizational policies, risk appetite, and strategic objectives. This ensures that security initiatives are aligned with business goals and have necessary resources and executive buy-in.
'Left-Up Approach' is not a recognized methodology for building a security program.
Concept tested: Security Program Building Approaches
Topics
Community Discussion
No community discussion yet for this question.