Which of the following should be the PRIMARY focus of an organization with immature incident detection capabilities?

The correct answer is A. Improving user awareness. For organizations with immature incident detection capabilities, the primary focus should be on improving user awareness. Human error is a common entry point for security incidents, and in the absence of mature detection mechanisms, informed and vigilant users serve as a…

Submitted by rohit_dlh· Apr 18, 2026Information Security Incident Management

Question

Options

AImproving user awareness
BInstalling new firewalls
CPerforming penetration testing
DUpdating security policies

How the community answered

(32 responses)

A
72% (23)
B
9% (3)
C
3% (1)
D
16% (5)

Explanation

For organizations with immature incident detection capabilities, the primary focus should be on improving user awareness. Human error is a common entry point for security incidents, and in the absence of mature detection mechanisms, informed and vigilant users serve as a crucial first line of defense. Educated users are more likely to recognize and report suspicious activities, helping compensate for weak detection controls.

Topics

#Incident detection#User awareness#Security controls#Incident management

Community Discussion

No community discussion yet for this question.

Full CISM Practice