CISA Certified Information Systems Auditor – Question0815

Which of the following would contribute MOST to employees’ understanding of data handling responsibilities?

A.
Requiring staff acknowledgement of security policies
B. Labeling documents according to appropriate security classification
C. Implementing a tailored security awareness training program
D. Demonstrating support by senior management of the security program

Correct Answer: C