Which of the following is the BEST indication of an enhanced risk-aware culture?
A.
Users have read and agreed to comply with security policies.
B.
Risk issues are openly discussed within the organization.
C.
Scores have improved on risk awareness quizzes.
D.
There is a decrease in the number of reported incidents.
The Answer Is:
B
This question includes an explanation.
Explanation:
A strong risk-aware culture is reflected by transparent communication about risks. Open discussions signify employee engagement and ownership of risk-related issues.