nerdexam
Isaca

CISM · Question #397

Which of the following BEST helps to establish an organization's security culture?

The correct answer is D. An information security mandate from senior management. The best way to establish an organization's security culture is through an information security mandate from senior management. When senior leadership actively supports and prioritizes information security, it sets the tone for the entire organization, reinforcing the…

Submitted by javi_es· Apr 18, 2026Information Security Governance

Question

Which of the following BEST helps to establish an organization's security culture?

Options

  • ARegularly scheduled information security training
  • BA substantial investment in information security tools
  • CThe perception of information security as a business enabler
  • DAn information security mandate from senior management

How the community answered

(53 responses)
  • A
    4% (2)
  • B
    4% (2)
  • C
    2% (1)
  • D
    91% (48)

Explanation

The best way to establish an organization's security culture is through an information security mandate from senior management. When senior leadership actively supports and prioritizes information security, it sets the tone for the entire organization, reinforcing the importance of security practices and embedding them into the company culture.

Topics

#Security Culture#Senior Management#Governance#Mandate

Community Discussion

No community discussion yet for this question.

Full CISM Practice