Certified Information Security Manager (CISM) — Question 408

The BEST way to ensure that frequently encountered incidents are reflected in the user security awareness training program is to include:

Answer options

• A. responses to security questionnaires.
• B. previous training sessions.
• C. examples of help desk requests.
• D. results of exit interviews.

Correct answer: C

Explanation

Including examples of help desk requests (C) allows for real-world scenarios that users may encounter, making the training more relevant. Responses to security questionnaires (A), previous training sessions (B), and results of exit interviews (D) do not provide specific incident examples that would enhance the training's effectiveness.