The MOST important factor in ensuring the success of an information security program is effective:

The MOST important factor in ensuring the success of an information security program is effective:

A.
communication of information security requirements to all users in the organization.

B.
formulation of policies and procedures for information security.

C.
alignment with organizational goals and objectives .

D.
monitoring compliance with information security policies and procedures.

Explanation:

The success of security programs is dependent upon alignment with organizational goals and
objectives. Communication is a secondary step. Effective communication and education of users

is a critical determinant of success but alignment with organizational goals and objectives is the
most important factor for success. Mere formulation of policies without effective communication to
users will not ensure success. Monitoring compliance with information security policies and
procedures can be, at best, a detective mechanism that will not lead to success in the midst of
uninformed users.