Encouraging Good Security Practices: The Best Way | CISM Exam Prep

Encouraging Good Security Practices

Prev Question Next Question

Question

The BEST way to encourage good security practices is to:

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C.

Out of the given options, the BEST way to encourage good security practices is to recognize appropriate security behavior by individuals (Option C).

Explanation:

Option A - Schedule periodic compliance audits: Periodic compliance audits can help organizations to identify and correct security vulnerabilities and non-compliance with security policies. However, audits alone may not be enough to encourage good security practices among employees. It is more of a reactive measure than a proactive approach.

Option B - Discipline those who fail to comply with the security policy: While it is important to hold employees accountable for their actions, solely relying on disciplinary actions to encourage good security practices is not the most effective approach. It may create a culture of fear and resentment, which can lead to employees hiding security incidents instead of reporting them.

Option C - Recognize appropriate security behavior by individuals: Recognizing employees who follow security policies and report security incidents can create a positive culture of security awareness. Rewards and incentives can encourage employees to adhere to security policies and take a proactive approach to security.

Option D - Publish the information security policy: Publishing the information security policy is an important step in communicating the organization's expectations for security practices. However, simply publishing the policy is not enough to ensure compliance. The policy must be regularly reviewed, updated, and reinforced through training and awareness programs to encourage good security practices.

Therefore, recognizing appropriate security behavior by individuals is the BEST way to encourage good security practices.