CISM · Question #896
Which of the following would be the BEST way to maintain organization-wide support for an information security strategy?
The correct answer is D. Ensure information security objectives are understood by key stakeholders.. Sustained organizational support requires that key stakeholders understand what information security is trying to achieve and why it matters to the business. When stakeholders understand the objectives, they become advocates and allocate resources accordingly. Simply making polic
Question
Which of the following would be the BEST way to maintain organization-wide support for an information security strategy?
Options
- AEnsure information security policies are easily accessible.
- BMonitor user activity to identify and track information security policy violations.
- CPlace information security awareness materials in visible locations.
- DEnsure information security objectives are understood by key stakeholders.
How the community answered
(29 responses)- A3% (1)
- B7% (2)
- C17% (5)
- D72% (21)
Explanation
Sustained organizational support requires that key stakeholders understand what information security is trying to achieve and why it matters to the business. When stakeholders understand the objectives, they become advocates and allocate resources accordingly. Simply making policies accessible (A) is passive and does not build understanding. Monitoring for violations (B) is punitive and breeds resistance rather than support. Posting awareness materials (C) raises general awareness but does not create alignment with strategic objectives. Understanding drives commitment; commitment sustains support.
Topics
Community Discussion
No community discussion yet for this question.