Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Risk appetite refers to the organization's tolerance for risk. If the organization has determined that the risks posed by a lack of information security awareness are acceptable in the short term, or if there are other, more immediate priorities (such as dealing with a crisis or a significant business initiative), then delaying the awareness program may be a strategic decision based on the current risk appetite.
Risk appetite is the driver.
A. If you lose Senior Management Support, almost every security initiative (from Governance to Awareness) pauses until that support is re-established. You cannot effectively manage risk without the backing of the business owners.