Which of the following is the BEST way to build a robust security culture?

The correct answer is C. Providing incentives for active participation by staff in security awareness activities. A robust security culture is built by encouraging active employee engagement in security awareness. Incentives (such as recognition, rewards, or gamification) help motivate employees to follow security best practices, report incidents, and take ownership of security responsibilit

Submitted by yaw92· Apr 18, 2026Information Security Program Development and Management

Question

Options

AEnsuring all security threats are communicated throughout the organization
BDocumenting job roles and responsibilities for the information security team
CProviding incentives for active participation by staff in security awareness activities
DCapturing security metrics and reporting to senior management

How the community answered

(53 responses)

A
9% (5)
B
4% (2)
C
70% (37)
D
17% (9)

Explanation

A robust security culture is built by encouraging active employee engagement in security awareness. Incentives (such as recognition, rewards, or gamification) help motivate employees to follow security best practices, report incidents, and take ownership of security responsibilities. While communication, role documentation, and security metrics are important, engagement and participation are the key drivers of a strong security culture.

Topics

#security culture#security awareness#employee engagement#incentives

Community Discussion

No community discussion yet for this question.

Full CISM Practice