An organization has identified a weakness in the ability of its employees to identify and...

Vendor: Isaca
Product: CISM
Update on: Jul 25, 2025
Questions: 967

Isaca CISM Question Answer

An organization has identified a weakness in the ability of its employees to identify and report cybersecurity incidents. Although training materials have been provided, employees show a lack of interest. Which of the following is the information security manager’s BEST course of action?

Block network access until security awareness training is complete.

Conduct an enterprise cybersecurity risk assessment.

Obtain key stakeholder and leadership support.

Send an email mandating training for the employees.