Which of the following BEST indicates senior management support for an information security program?

The correct answer is B. Steering committee involvement. Steering committee involvement represents a formal, ongoing governance commitment by senior management. It means executives are actively participating in setting direction, reviewing performance, making decisions, and allocating resources for the security program - not just…

Submitted by thandi_sa· Apr 18, 2026Information Security Governance

Question

Options

ATop-down communication
BSteering committee involvement
CParticipation in a certification program
DRegular security awareness training

How the community answered

(27 responses)

A
4% (1)
B
85% (23)
C
4% (1)
D
7% (2)

Explanation

Steering committee involvement represents a formal, ongoing governance commitment by senior management. It means executives are actively participating in setting direction, reviewing performance, making decisions, and allocating resources for the security program - not just passively receiving reports. This structural participation is the clearest indicator of genuine support. Top-down communication (A) can be delegated. Participation in certification programs (C) is a one-time or individual activity. Regular security awareness training (D) is an operational activity for employees, not a governance mechanism that demonstrates executive commitment.

Topics

#Senior Management Support#Information Security Governance#Steering Committee#Program Oversight

Community Discussion

No community discussion yet for this question.

Full CISM Practice