Certified Information Security Manager (CISM) — Question 791

Which of the following BEST enables an organization to transform its culture to support information security?

Answer options

• A. Strong management support
• B. Robust technical security controls
• C. Periodic compliance audits
• D. Incentives for security incident reporting

Correct answer: A

Explanation

Strong management support is crucial because it sets the tone for the entire organization and encourages a culture that prioritizes information security. While robust technical controls, compliance audits, and incident reporting incentives are important, they cannot effectively transform the organizational culture without the backing of management.