In developing a security awareness program, it is MOST important to
A.
Understand the corporate culture and how it will affect security.
B.
Understand employees preferences for information security.
C.
Know what security awareness products are available.
D.
Identify weakness in line management support.
Explanation:
The controls and procedures of a security program should reflect the nature of the
data being processed…These different types of companies would also have very different cultures.
For a security awareness program to be effective, these considerations must be understood and
the program should be developed in a fashion that makes sense per environment – Shon Harris
All-in-one CISSP Certification Guide pg 109