Isaca
CISM · Question #843
The BEST way to achieve a strong information security culture is by:
The correct answer is D. educating and training employees. Educating and training employees most effectively builds a strong information security culture by shaping awareness and day-to-day behavior, making security expectations understood and consistently practiced across the organization.
Submitted by satoshi_tk· Apr 18, 2026Information Security Program Development and Management
Question
The BEST way to achieve a strong information security culture is by:
Options
- Adefining responsibilities in employee job descriptions.
- Brequiring employees to sign acknowledgement of policy.
- Cimplementing a warning banner upon login.
- Deducating and training employees.
How the community answered
(50 responses)- A8% (4)
- B4% (2)
- C2% (1)
- D86% (43)
Explanation
Educating and training employees most effectively builds a strong information security culture by shaping awareness and day-to-day behavior, making security expectations understood and consistently practiced across the organization.
Topics
#Information Security Culture#Security Awareness Training#Employee Education#Human Factor Security
Community Discussion
No community discussion yet for this question.