An organization has identified a weakness in the ability of its employees to identify and report cybersecurity incidents. Although training materials have been provided, employees show a lack of inter

The correct answer is C. Obtain key stakeholder and leadership support.. Gaining key stakeholder and leadership support is the best course of action because visible endorsement from management reinforces the importance of cybersecurity awareness and motivates employees to engage. Leadership backing helps drive a culture of security and ensures trainin

Submitted by manish99· Apr 18, 2026Information Security Program Development and Management

Question

An organization has identified a weakness in the ability of its employees to identify and report cybersecurity incidents. Although training materials have been provided, employees show a lack of interest. Which of the following is the information security manager's BEST course of action?

Options

AConduct an enterprise cybersecurity risk assessment.
BBlock network access until security awareness training is complete.
CObtain key stakeholder and leadership support.
DSend an email mandating training for the employees.

How the community answered

(46 responses)

A
9% (4)
B
2% (1)
C
72% (33)
D
17% (8)

Explanation

Gaining key stakeholder and leadership support is the best course of action because visible endorsement from management reinforces the importance of cybersecurity awareness and motivates employees to engage. Leadership backing helps drive a culture of security and ensures training initiatives are taken seriously across the organization.

Topics

#Security awareness#Leadership support#Program management#Employee engagement

Community Discussion

No community discussion yet for this question.

Full CISM Practice