Certified Information Security Manager (CISM) — Question 1175

Which of the following has the GREATEST impact on efforts to improve an organization's security posture?

Answer options

• A. Well-documented security policies and procedures
• B. Supportive tone at the top regarding security
• C. Regular reporting to senior management
• D. Automation of security controls

Correct answer: B

Explanation

The correct answer is B because a supportive tone from leadership fosters a culture of security awareness and prioritization throughout the organization. While well-documented policies, regular reporting, and automation are important, they are less effective without strong commitment and support from top management, which drives engagement and compliance across all levels.