ISC Exam Questions

Ensuring that the people responsible for protecting the company’s assets are actually driving

Ensuring that the people responsible for protecting the company’s assets are actually driving the program is an example of:

A.
The Delphi approach

B.
The top-down approach

C.
The bottom-up approach

D.
The technology-driven approach

Explanation:
A security program should use a top-down approach, meaning the
initiation, support, and direction come from top management and work their way down
to middle management and staff members.