CISM · Question #34
Which of the following is the GREATEST benefit of conducting an organization-wide security awareness program?
The correct answer is B. Security behavior is improved. The primary benefit of an organization-wide security awareness program is improving employee security behavior, which directly reduces human-related security risks.
Question
Which of the following is the GREATEST benefit of conducting an organization-wide security awareness program?
Options
- AMore security incidents are detected
- BSecurity behavior is improved
- CThe security strategy is promoted
- DFewer security incidents are reported
How the community answered
(47 responses)- A4% (2)
- B89% (42)
- C2% (1)
- D4% (2)
Why each option
The primary benefit of an organization-wide security awareness program is improving employee security behavior, which directly reduces human-related security risks.
While increased awareness might lead to more incidents being reported initially, the greatest benefit is preventative through behavioral change, not just detection.
Security awareness programs educate employees on security best practices, policies, and threats, leading to a direct improvement in their day-to-day security-related behaviors and decision-making. This empowered human firewall is critical for overall organizational security.
Promoting the security strategy is a component, but not the ultimate benefit; the strategy is promoted to achieve behavioral change and reduce risk.
The goal is fewer incidents occurring due to better behavior, not just fewer being reported, and initially, more might be reported as awareness increases.
Concept tested: Benefits of security awareness programs
Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-50.pdf
Topics
Community Discussion
No community discussion yet for this question.