What is the MOST important factor in the successful implementation of an enterprise wide information security program? 

Answer options:

A. Realistic budget estimates
B. Security awareness
C. Support of senior management
D. Recalculation of the work factor

C

Without the support of senior management, an information security program has little chance of survival. A company`s leadership group, more than any other group, will more successfully drive the program. Their authoritative position in the company is a key factor. Budget approval, resource commitments, and companywide participation also require the buy-in from senior management. Senior management is responsible for providing an adequate budget and the necessary resources. Security awareness is important, but not the most important factor. Recalculation of the work factor is a part of risk management.