CISM · Question #590
An organization has an ongoing security awareness training program. Employee participation has been decreasing over the year, while the number of malware and phishing incidents from email has been…
The correct answer is B. Report the findings to senior management with recommendations. Reporting the declining participation and rising incidents to senior management with actionable recommendations ensures executive support, reinforces accountability, and enables strategic improvements to the training program.
Question
An organization has an ongoing security awareness training program. Employee participation has been decreasing over the year, while the number of malware and phishing incidents from email has been increasing. What is the information security manager's BEST course of action?
Options
- AInclude regular phishing campaigns after each training session.
- BReport the findings to senior management with recommendations.
- CMake the training program mandatory for all employees.
- DImplement a phishing reporting tool in the email system.
How the community answered
(36 responses)- A6% (2)
- B69% (25)
- C17% (6)
- D8% (3)
Explanation
Reporting the declining participation and rising incidents to senior management with actionable recommendations ensures executive support, reinforces accountability, and enables strategic improvements to the training program.
Topics
Community Discussion
No community discussion yet for this question.