Tag: Question 0682

CISM Certified Information Security Manager – Question0682

The MOST important success factor to design an effective IT security awareness program is to:

A. customize the content to the target audience.
B. ensure senior management is represented.
C. ensure that all the staff is trained.
D. avoid technical content but give concrete examples.

Correct Answer: A

Explanation:

Explanation:
Awareness training can only be effective if it is customized to the expectations and needs of attendees. Needs will be quite different depending on the target audience and will vary between business managers, end users and IT staff; program content and the level of detail communicated will therefore be different. Other criteria are also important; however, the customization of content is the most important factor.