nerdexam
Isaca

CISM · Question #34

Which of the following is the GREATEST benefit of conducting an organization-wide security awareness program?

The correct answer is B. Security behavior is improved. The primary benefit of an organization-wide security awareness program is improving employee security behavior, which directly reduces human-related security risks.

Submitted by tyler.j· Apr 18, 2026Information Security Program Development and Management

Question

Which of the following is the GREATEST benefit of conducting an organization-wide security awareness program?

Options

  • AMore security incidents are detected
  • BSecurity behavior is improved
  • CThe security strategy is promoted
  • DFewer security incidents are reported

How the community answered

(47 responses)
  • A
    4% (2)
  • B
    89% (42)
  • C
    2% (1)
  • D
    4% (2)

Why each option

The primary benefit of an organization-wide security awareness program is improving employee security behavior, which directly reduces human-related security risks.

AMore security incidents are detected

While increased awareness might lead to more incidents being reported initially, the greatest benefit is preventative through behavioral change, not just detection.

BSecurity behavior is improvedCorrect

Security awareness programs educate employees on security best practices, policies, and threats, leading to a direct improvement in their day-to-day security-related behaviors and decision-making. This empowered human firewall is critical for overall organizational security.

CThe security strategy is promoted

Promoting the security strategy is a component, but not the ultimate benefit; the strategy is promoted to achieve behavioral change and reduce risk.

DFewer security incidents are reported

The goal is fewer incidents occurring due to better behavior, not just fewer being reported, and initially, more might be reported as awareness increases.

Concept tested: Benefits of security awareness programs

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-50.pdf

Topics

#Security Awareness#User Behavior#Security Training

Community Discussion

No community discussion yet for this question.

Full CISM Practice