Which of the following information security activities is MOST helpful to support compliance with information security policy?

The correct answer is D. Obtaining management commitment. Management commitment is critical for ensuring compliance with the information security policy, as it drives enforcement, resource allocation, and organizational support. When leadership prioritizes security, employees are more likely to adhere to policies, and security…

Submitted by weili_xi· Apr 18, 2026Information Security Governance

Question

Options

ACreating trend metrics
BPerforming periodic IT reviews on new system acquisitions
CPreparing information security awareness programs
DObtaining management commitment

How the community answered

(33 responses)

A
6% (2)
B
3% (1)
C
15% (5)
D
76% (25)

Explanation

Management commitment is critical for ensuring compliance with the information security policy, as it drives enforcement, resource allocation, and organizational support. When leadership prioritizes security, employees are more likely to adhere to policies, and security initiatives receive the necessary funding and attention. While awareness programs, IT reviews, and metrics help reinforce compliance, they are only effective when backed by strong management

Topics

#Management Commitment#Policy Compliance#Information Security Governance#Program Effectiveness

Community Discussion

No community discussion yet for this question.

Full CISM Practice