Certified Information Security Manager (CISM) — Question 1188
Which of the following has the GREATEST influence on the successful integration of information security within the business?
Answer options
- A. Organizational structure and culture
- B. Risk tolerance and organizational objectives
- C. Information security personnel
- D. The desired state of the organization
Correct answer: A
Explanation
The correct answer is A because the organizational structure and culture directly shape how security policies are developed and adhered to within the business. While risk tolerance and objectives, security personnel, and the desired state of the organization are important, they are more influenced by the existing culture and structure rather than being foundational themselves.