The MOST important success factor to design an effective IT security awareness program is to:
A.
customize the content to the target audience.
B.
ensure senior management is represented.
C.
ensure that all the staff is trained.
D.
avoid technical content but give concrete examples.
Explanation:
Awareness training can only be effective if it is customized to the expectations and needs of
attendees. Needs will be quite different depending on the target audience and will vary between
business managers, end users and IT staff; program content and the level of detail communicated
will therefore be different. Other criteria are also important; however, the customization of content
is the most important factor.