CISSP-ISSEP · Question #220
What is the MOST critical factor to achieve the goals of a security program?
The correct answer is B. Executive management support. Executive management support (B) is the most critical factor because security programs require authority, organizational alignment, and resource allocation that only top leadership can mandate - without executive buy-in, even the best security team cannot enforce policies…
Question
What is the MOST critical factor to achieve the goals of a security program?
Options
- ACapabilities of security resources
- BExecutive management support
- CEffectiveness of security management
- DBudget approved for security resources
How the community answered
(27 responses)- B89% (24)
- C4% (1)
- D7% (2)
Explanation
Executive management support (B) is the most critical factor because security programs require authority, organizational alignment, and resource allocation that only top leadership can mandate - without executive buy-in, even the best security team cannot enforce policies, secure funding, or drive cultural change across the organization.
Why the distractors fall short:
- (A) Capabilities of security resources - skilled staff matter, but capabilities alone cannot overcome a lack of organizational authority or funding.
- (C) Effectiveness of security management - good management is valuable, but mid-level managers cannot override organizational priorities without executive backing.
- (D) Budget - funding is necessary but secondary; executives control the budget, making their support the root enabler rather than the budget itself.
Memory tip: Think "top-down security" - everything else (budget, capabilities, effectiveness) flows from executive support. If the exam question asks what's "most critical," "foundational," or "primary," leadership support almost always trumps tactical answers like budget or staff skill.
Topics
Community Discussion
No community discussion yet for this question.