Certified Information Security Manager (CISM) — Question 1184

Which of the following BEST enables an organization to maintain an appropriate security control environment?

Answer options

• A. Periodic employee security training
• B. Budgetary support for security
• C. Alignment to an industry security framework
• D. Monitoring of the threat landscape

Correct answer: D

Explanation

Monitoring the threat landscape allows an organization to stay informed about emerging threats and vulnerabilities, which is crucial for adapting security controls effectively. While employee training, budgetary support, and alignment with security frameworks are important, they do not provide the same level of real-time awareness and responsiveness to threats as monitoring does.