Isaca
CISM · Question #818
Which of the following is MOST effective for improving an organization's security culture?
The correct answer is A. Security awareness. Security awareness directly influences employee behavior and attitudes by educating users on their security responsibilities, making it the most effective way to improve an organization’s security culture compared to policies, strategies, or technical controls alone.
Submitted by ravi_2018· Apr 18, 2026Information Security Program Development and Management
Question
Which of the following is MOST effective for improving an organization's security culture?
Options
- ASecurity awareness
- BSecurity policy
- CSecurity strategy
- DSecurity controls
How the community answered
(48 responses)- A92% (44)
- B4% (2)
- C2% (1)
- D2% (1)
Explanation
Security awareness directly influences employee behavior and attitudes by educating users on their security responsibilities, making it the most effective way to improve an organization’s security culture compared to policies, strategies, or technical controls alone.
Topics
#Security awareness#Security culture#Human factors#Training & education
Community Discussion
No community discussion yet for this question.