Scenario: As you begin to develop the program for your organization, you assess the corporate culture and determine that there is a pervasive opinion that the security program only slows things down and limits the performance of the “real workers.”
What must you do first in order to shift the prevailing opinion and reshape corporate culture to understand the value of information security to the organization?
A . Cite corporate policy and insist on compliance with audit findings
B . Draw from your experience and recount stories of how other companies have been compromised
C . Understand the business and focus your efforts on enabling operations securely
D . Cite compliance with laws, statutes, and regulations C explaining the financial implications for the company for non-compliance
Answer: C