Isaca
CISM · Question #571
Which of the following BEST contributes to establishing an information security culture within an organization?
The correct answer is B. Conducting regular information security awareness initiatives. Regular awareness initiatives educate and engage employees at all levels, reinforcing secure behavior and integrating information security into daily practices, which is essential for building and sustaining a strong security culture.
Submitted by akirajp· Apr 18, 2026Information Security Program Development and Management
Question
Which of the following BEST contributes to establishing an information security culture within an organization?
Options
- AFollowing industry best practices for information security
- BConducting regular information security awareness initiatives
- CObtaining executive approval of information security policy
- DIncorporating information security requirements in the software development life cycle
How the community answered
(17 responses)- A12% (2)
- B82% (14)
- D6% (1)
Explanation
Regular awareness initiatives educate and engage employees at all levels, reinforcing secure behavior and integrating information security into daily practices, which is essential for building and sustaining a strong security culture.
Topics
#Information security culture#Security awareness#Security training#Behavioral security
Community Discussion
No community discussion yet for this question.