Certified Chief Information Security Officer (CCISO) — Question 120

A CISO implements smart cards for credential management, and as a result has reduced costs associated with help desk operations supporting password resets.
This demonstrates which of the following principles?

Answer options

• A. Increased security program presence
• B. Regulatory compliance effectiveness
• C. Security organizational policy enforcement
• D. Proper organizational policy enforcement

Correct answer: D

Explanation

The correct answer is D because the implementation of smart cards indicates that the organization is effectively applying its policies regarding credential management, which in turn minimizes help desk workload. Options A and C focus on security presence and policy enforcement but do not specifically address the operational cost reduction aspect. Option B is unrelated as it deals with regulatory compliance rather than organizational policy enforcement.