Which of the following has the GREATEST impact on the effectiveness of an organization's security posture?

The correct answer is B. Security is embedded in organizational culture. When security is genuinely embedded in organizational culture, it becomes an intrinsic part of how every employee thinks and acts - not just during mandated training or when auditors are watching. This produces the most durable and effective security posture. Mandatory training…

Submitted by thandi_sa· Apr 18, 2026Information Security Program Development and Management

Question

Options

ANew hires are mandated to attend security training.
BSecurity is embedded in organizational culture.
CSenior management has approved and endorsed security practices.
DIncident metrics are frequently compared against industry benchmarks.

How the community answered

(14 responses)

A
7% (1)
B
50% (7)
C
29% (4)
D
14% (2)

Explanation

When security is genuinely embedded in organizational culture, it becomes an intrinsic part of how every employee thinks and acts - not just during mandated training or when auditors are watching. This produces the most durable and effective security posture. Mandatory training for new hires (A) is limited in scope and fades over time. Management endorsement (C) is a necessary enabler but does not guarantee actual behavioral change across the organization. Benchmarking metrics (D) is a measurement activity, not a driver of security effectiveness. Culture is the multiplier that determines how well all other controls actually function.

Topics

#Security culture#Organizational security effectiveness#Information security program management#Security awareness

Community Discussion

No community discussion yet for this question.

Full CISM Practice