An organization has invested heavily in technical and physical controls but continues to have an unacceptable level of incidents. Which of the following is MOST likely to improve this issue?

The correct answer is A. Mandating security awareness training upon hire and periodically thereafter. Human error is a leading cause of security incidents. Mandating regular security awareness training helps improve employee behavior and reduces the likelihood of incidents that bypass technical and physical controls.

Submitted by ravi_2018· Apr 18, 2026Information Security Program

Question

Options

AMandating security awareness training upon hire and periodically thereafter
BAuditing existing controls to identify deficiencies
CRequiring employees to review and acknowledge security policies
DRequiring training for control owners to address incidents

How the community answered

(43 responses)

A
74% (32)
B
16% (7)
C
7% (3)
D
2% (1)

Explanation

Human error is a leading cause of security incidents. Mandating regular security awareness training helps improve employee behavior and reduces the likelihood of incidents that bypass technical and physical controls.

Topics

#Security Awareness Training#Human Factors in Security#Incident Prevention#Information Security Program

Community Discussion

No community discussion yet for this question.

Full CISM Practice