Which of the following is the most likely to be included as an element of communication in a security awareness program?

Question

Options

• AReporting phishing attempts or other suspicious activities
• BDetecting insider threats using anomalous behavior recognition
• CVerifying information when modifying wire transfer data
• DPerforming social engineering as part of third-party penetration testing

• A
  92% (24)
• B
  4% (1)
• D
  4% (1)

Explanation

Reporting phishing attempts and suspicious activities is a foundational element of security awareness programs because these programs are designed to educate all employees on recognizing and responding to common threats - making A the correct choice.

Why the distractors are wrong:

• B (detecting insider threats via anomalous behavior) is a function of security monitoring tools and the SOC/security team, not something taught in a general awareness program.
• C (verifying wire transfer modifications) is a specific financial control procedure, typically part of anti-fraud policy for finance staff - too narrow and role-specific for a broad awareness program.
• D (performing social engineering in penetration testing) is a specialized activity conducted by trained security professionals under contract, not end-user behavior.

Memory tip: Think of a security awareness program as teaching every employee what to watch for and report - if an option describes something only a specialist or tool should do, it's likely a distractor.

No community discussion yet for this question.