Study. uk . com
  1. Home
  2. All questions
  3. Question 411

CISM study material · question 411 of 1000

Which behaviour does NIST list as an indicator that an awareness programme is genuinely supported?

  1. Executives are exempted from the annual awareness module because their own time is far too costly to spend on any of it
  2. The programme is delivered by an external provider whose material is used right across the whole sector
  3. Awareness completion rates exceed ninety percent within the first month of the new module being issued
  4. Executives and managers do not use their status to avoid controls that ordinary staff follow
Show the answer

Answer: D. Executives and managers do not use their status to avoid controls that ordinary staff follow

Among the key indicators NIST lists for gauging support for and acceptance of an awareness programme is that executives and managers do not use their status in the organisation to avoid security controls consistently adhered to by the rank and file.

Source: NIST SP 800-100 (NIST) — Sec. 4.6 Program Success Indicators

Challenge yourself on this topic → Study as cards