Which of the following is an organization's BEST defense against malware?

The correct answer is C. Security awareness training. Security awareness training is the best defense because most malware infections rely on human error - clicking malicious links, opening infected attachments, or falling for phishing. When users understand threats and recognize suspicious activity, they stop attacks before…

Submitted by hans_de· Apr 18, 2026Protection of Information Assets

Question

Which of the following is an organization’s BEST defense against malware?

Options

ADocumented security procedures
BIntrusion prevention system (IPS)
CSecurity awareness training
DIntrusion detection system (IDS)

How the community answered

(30 responses)

A
3% (1)
B
3% (1)
C
83% (25)
D
10% (3)

Explanation

Security awareness training is the best defense because most malware infections rely on human error - clicking malicious links, opening infected attachments, or falling for phishing. When users understand threats and recognize suspicious activity, they stop attacks before technical controls are even needed; humans are both the weakest link and the most powerful first line of defense.

A (Documented security procedures) - Procedures are only effective if people follow them; documentation alone doesn't change behavior or prevent clicks.
B (IPS) - An IPS blocks known/signature-based threats in-transit, but can't stop zero-days or malware delivered through user actions like USB insertion or social engineering.
D (IDS) - An IDS detects and alerts after suspicious activity occurs; it's reactive, not preventive, and takes no blocking action on its own.

Memory tip: Think "People > Policies > Technology" for malware defense. Trained people prevent the mistake; an IPS/IDS only reacts after something has already reached or entered the network.

Topics

#Malware defense#Security awareness training#Human element in security#Preventative controls

Community Discussion

No community discussion yet for this question.

Full CISA Practice