After a series of account compromises and credential misuse, a company hires a security manager to develop a security program. Which of the following steps should the security manager take first to…

The correct answer is D. Update policies and handbooks to ensure all employees are informed of the new procedures. The first step in increasing security awareness should be to update policies and handbooks to ensure that all employees are aware of the new procedures and security expectations. Clear, documented policies provide a foundation for employees to understand their roles and…

Submitted by lars.no· Mar 6, 2026Security program management and oversight

Question

After a series of account compromises and credential misuse, a company hires a security manager to develop a security program. Which of the following steps should the security manager take first to increase security awareness?

Options

AEvaluate tools that identify risky behavior and distribute reports on the findings.
BSend quarterly newsletters that explain the importance of password management.
CDevelop phishing campaigns and notify the management team of any successes.
DUpdate policies and handbooks to ensure all employees are informed of the new procedures.

How the community answered

(51 responses)

A
12% (6)
B
6% (3)
C
2% (1)
D
80% (41)

Explanation

The first step in increasing security awareness should be to update policies and handbooks to ensure that all employees are aware of the new procedures and security expectations. Clear, documented policies provide a foundation for employees to understand their roles and responsibilities regarding security. Once the policies are in place, the company can implement additional strategies like training, newsletters, or phishing campaigns to reinforce these practices.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice