Which of the following is MOST important for building a robust information security culture within an organization?

A. Mature information security awareness training across the organization

B. Security controls embedded within the development and operation of the IT environment

C. Senior management approval of information security policies

D. Strict enforcement of employee compliance with organizational security policies








 

Suggested Answer: A



This question is in CISM exam 
For getting Certified Information Security Manager Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to ISACA.