CISM · Question #918
Which of the following is MOST helpful for fostering an effective information security culture?
The correct answer is C. Obtaining support from key organizational stakeholders. Culture is driven from the top. When key organizational stakeholders - executives, department heads, and influential leaders - visibly support and champion information security, it signals to the entire organization that security is a shared value, not just an IT problem. This…
Question
Which of the following is MOST helpful for fostering an effective information security culture?
Options
- AConducting regular phishing testing
- BDeveloping procedures that align with the information security policy
- CObtaining support from key organizational stakeholders
- DImplementing technical security controls
How the community answered
(51 responses)- A4% (2)
- B16% (8)
- C73% (37)
- D8% (4)
Explanation
Culture is driven from the top. When key organizational stakeholders - executives, department heads, and influential leaders - visibly support and champion information security, it signals to the entire organization that security is a shared value, not just an IT problem. This stakeholder buy-in is what transforms security from a compliance checkbox into a genuine cultural norm. Phishing tests (A) measure awareness but don't build culture. Procedures (B) and technical controls (D) enforce behavior but don't change attitudes or values the way leadership support does.
Topics
Community Discussion
No community discussion yet for this question.