Certified Information Security Manager (CISM) — Question 126

Which of the following should be the PRIMARY driver for delaying the delivery of an information security awareness program?

Answer options

• A. Change in senior management
• B. High employee turnover
• C. Employee acceptance
• D. Risk appetite

Correct answer: A

Explanation

The correct answer is A, as a change in senior management can significantly impact the direction and priorities of the awareness program. Other options, while they may present challenges, do not fundamentally affect the strategic alignment and support needed from leadership, which is critical for the program's success.