An organization has recently acquired a new entity. Which of the following issues is MOST likely to arise when the organization integrates its security strategy without considering the culture of…

Question

Options

• AResistance to the implementation
• BInsufficient technical expertise and skills
• CMissed compliance deadlines
• DLack of available resources

• A
  69% (18)
• B
  8% (2)
• C
  15% (4)
• D
  8% (2)

Explanation

When an organization imposes its security strategy on an acquired entity without considering that entity's existing culture, the most predictable friction is human resistance - employees who feel their norms and workflows are being overridden without acknowledgment will push back, slow adoption, or circumvent controls entirely. Culture drives behavior, and behavior is the front line of security.

Why the distractors fall short:

• B (Insufficient technical expertise): Technical skill gaps are a training/hiring problem, not a direct consequence of ignoring culture during integration.
• C (Missed compliance deadlines): Compliance timing is a project management concern; while culture can affect it, it's not the most likely direct outcome.
• D (Lack of resources): Resource shortfalls stem from budget or planning failures, not from cultural misalignment specifically.

Memory tip: Think of it this way - you can mandate a policy, but you can't mandate buy-in. Whenever an exam question pairs "no cultural consideration" with a merger/acquisition scenario, the answer will almost always point to people problems (resistance) rather than technical or logistical ones.

No community discussion yet for this question.