Certified Information Security Manager (CISM) — Question 1119

Which of the following BEST enables the effectiveness of an information security training program for new employees?

Answer options

• A. New employees are required to acknowledge the information security policy.
• B. New employees must complete a security assessment after training.
• C. Information security training precedes all other onboarding training.
• D. The training is specific to new employees' job functions.

Correct answer: D

Explanation

The correct answer, D, highlights the importance of customizing training to align with the specific job roles of new employees, which enhances relevance and retention. Option A is important for policy acknowledgment but does not ensure understanding or effectiveness of training. Option B adds an assessment but does not address the immediate training needs, while option C does not focus on the relevance of the training content to the employees' roles.