CSSLP · Question #331
Which of the following approaches can be used to build a security program? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is C. Top-Down Approach D. Bottom-Up Approach. Both Top-Down and Bottom-Up approaches are valid strategies for building an organizational security program, often used in conjunction to address different aspects of security.
Question
Which of the following approaches can be used to build a security program? Each correct answer represents a complete solution. Choose all that apply.
Options
- ARight-Up Approach
- BLeft-Up Approach
- CTop-Down Approach
- DBottom-Up Approach
How the community answered
(53 responses)- A6% (3)
- B2% (1)
- C92% (49)
Why each option
Both Top-Down and Bottom-Up approaches are valid strategies for building an organizational security program, often used in conjunction to address different aspects of security.
Right-Up Approach is not a recognized or standard terminology for building a security program.
Left-Up Approach is not a recognized or standard terminology for building a security program.
The Top-Down approach starts with senior management defining the overall security strategy, policies, and objectives, which then cascade down to guide operational implementation and technical controls throughout the organization.
The Bottom-Up approach begins with technical staff and operational teams identifying specific security needs, risks, and implementing controls, which can then be formalized into policies and standards.
Concept tested: Approaches to building security programs
Topics
Community Discussion
No community discussion yet for this question.