Isaca
CISM · Question #572
Which of the following BEST indicates that an organization has a mature security culture?
The correct answer is D. Senior management demonstrates support for the security program.. A mature security culture is best indicated by visible and consistent support from senior management, as their commitment drives organization-wide prioritization of security and fosters accountability at all levels.
Submitted by thandi_sa· Apr 18, 2026Information Security Governance
Question
Which of the following BEST indicates that an organization has a mature security culture?
Options
- ASecurity policies for senior management are customized.
- BAll users are required to attend regular security awareness training.
- CThe information security manager approves all security resource allocation decisions.
- DSenior management demonstrates support for the security program.
How the community answered
(28 responses)- A4% (1)
- C7% (2)
- D89% (25)
Explanation
A mature security culture is best indicated by visible and consistent support from senior management, as their commitment drives organization-wide prioritization of security and fosters accountability at all levels.
Topics
#Security Culture#Senior Management Support#Information Security Governance#Security Program Effectiveness
Community Discussion
No community discussion yet for this question.