Certified Information Security Manager (CISM) — Question 757

Which of the following roles is BEST able to influence the security culture within an organization?

Answer options

• A. Chief information security officer (CISO)
• B. Chief information officer (CIO)
• C. Chief operating officer (COO)
• D. Chief executive officer (CEO)

Correct answer: D

Explanation

The Chief Executive Officer (CEO) is the highest-ranking executive in an organization and has the authority to set the tone for the entire company, including its security culture. While the other roles play significant parts in security, they do not have the same level of influence as the CEO in promoting and enforcing a strong security culture.