GIAC Security Leadership Certification (GSLC) — Question 11

At which stage of the Security Awareness Maturity Model is annual training first implemented?

Answer options

• A. Long-term sustainment and cultural change
• B. Metrics framework
• C. Compliance-focused
• D. Promoting awareness and behavioral change

Correct answer: D

Explanation

Annual training is first introduced at the 'Promoting awareness and behavioral change' stage, as this is when organizations begin to prioritize ongoing education about security. The other stages, such as 'Compliance-focused', focus more on meeting regulatory requirements rather than proactive training efforts.