nerdexam
(ISC)2

CISSP-ISSEP · Question #220

What is the MOST critical factor to achieve the goals of a security program?

The correct answer is B. Executive management support. Executive management support (B) is the most critical factor because security programs require authority, organizational alignment, and resource allocation that only top leadership can mandate - without executive buy-in, even the best security team cannot enforce policies…

Governance and Training

Question

What is the MOST critical factor to achieve the goals of a security program?

Options

  • ACapabilities of security resources
  • BExecutive management support
  • CEffectiveness of security management
  • DBudget approved for security resources

How the community answered

(27 responses)
  • B
    89% (24)
  • C
    4% (1)
  • D
    7% (2)

Explanation

Executive management support (B) is the most critical factor because security programs require authority, organizational alignment, and resource allocation that only top leadership can mandate - without executive buy-in, even the best security team cannot enforce policies, secure funding, or drive cultural change across the organization.

Why the distractors fall short:

  • (A) Capabilities of security resources - skilled staff matter, but capabilities alone cannot overcome a lack of organizational authority or funding.
  • (C) Effectiveness of security management - good management is valuable, but mid-level managers cannot override organizational priorities without executive backing.
  • (D) Budget - funding is necessary but secondary; executives control the budget, making their support the root enabler rather than the budget itself.

Memory tip: Think "top-down security" - everything else (budget, capabilities, effectiveness) flows from executive support. If the exam question asks what's "most critical," "foundational," or "primary," leadership support almost always trumps tactical answers like budget or staff skill.

Topics

#Executive Support#Security Governance#Program Oversight

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSEP Practice