Study. uk . com
  1. Home
  2. All questions
  3. Question 401

CISM study material · question 401 of 1000

An organisation buys a generic off-the-shelf awareness course and reports poor engagement. Which design principle does NIST identify?

  1. Engagement depends on the length of the course rather than on any of its actual content, so a shorter module will always be better received than a longer one ever is
  2. Engagement is not a valid measure of an awareness programme at all, which is judged only on whether every single member of staff completed it before the set deadline
  3. The programme must be designed around the organisation's mission, business needs, culture and technology, since users act on material they judge relevant
  4. Off-the-shelf material is prohibited outright by the NIST guidance, which requires every single organisation to write all of its own awareness content from scratch in each and every single year
Show the answer

Answer: C. The programme must be designed around the organisation's mission, business needs, culture and technology, since users act on material they judge relevant

NIST states awareness and training programmes must be designed with the mission in mind, must support business needs and be relevant to the organisation's culture and technology architecture, and that the most successful programmes are those users find relevant.

Source: NIST SP 800-100 (NIST) — Sec. 4.3.1 Designing

Challenge yourself on this topic → Study as cards