CISM: Certified Information Security ManagerDemo

Question

To help make an information security training program MOST effective, its content should be:

A aligned to business processes.
B based on employees' roles.
C based on recent incidents.
D focused on information security policy.

Explanation

Information security training is most effective when it is tailored to employees’ roles, because role-specific responsibilities and system access determine the relevant security risks, required controls, and expected behaviors.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ426

Community Discussion