Which of the following represents the best approach to implementing a security program?
A.
Top down
B.
Bottom up
C.
Compartmented
D.
Distributed
Explanation:
A top-down approach makes upper management responsible for driving the program to
success. A bottom-up approach rarely works, since without the support and
involvement of management, appropriate priority is not set by the workforce.
Practically speaking a security program can take other forms, but regardless of
alternative configurations, programs not driven by top management tend to fail.