Which of the following is MOST critical to the success of an information security program?

The correct answer is A. Management's commitment to information security. Management commitment is the foundational enabler of any information security program. Without it, there is no budget, no enforcement authority, no organizational priority, and no accountability structure. All other elements - alignment with IT objectives, business integration…

Submitted by akirajp· Apr 18, 2026Governance and Management of IT

Question

Options

AManagement's commitment to information security
BAlignment of information security with IT objectives
CIntegration of business and information security
DUser accountability for information security

How the community answered

(49 responses)

A
88% (43)
B
2% (1)
C
8% (4)
D
2% (1)

Explanation

Management commitment is the foundational enabler of any information security program. Without it, there is no budget, no enforcement authority, no organizational priority, and no accountability structure. All other elements - alignment with IT objectives, business integration, and user accountability - depend on management actively supporting and championing the security program. Options B, C, and D are important, but they cannot be achieved sustainably without top-down commitment. This is a consistent principle across frameworks like COBIT, ISO 27001, and NIST.

Topics

#Information Security Program#Management Commitment#Governance#Success Factors

Community Discussion

No community discussion yet for this question.

Full CISA Practice