Which of the following variables is the most influential in determining how to structure an information security program?
A) Security capital budget
B) Organizational size
C) Security personnel budget
D) Organizational culture

Question

Quizplus · Accepted Answer

Organizational culture heavily influences the formation and successful implementation of an information security program. It sets the tone for the organization's approach to security, guides decision-making, and affects the level of emphasis placed on information security. Factors like fear of breaches, compliance requirements, innovation, and the perception of the importance of information security are influenced by organizational culture. For example, a company with a strong security culture may have a more robust training program for employees, invest more in security technology, and have stricter policies and procedures, regardless of its size or budget. Thus, it is vital to consider and assess the organizational culture before designing and structuring an information security program. While the other variables listed can be important, organizational culture is the most influential.

Which of the Following Variables Is the Most Influential in Determining