In developing a security awareness program, it is MOST important to

A.
Understand the corporate culture and how it will affect security.

B.
Understand employees preferences for information security.

C.
Know what security awareness products are available.

D.
Identify weakness in line management support.

Explanation:
The controls and procedures of a security program should reflect the nature of the data being
processed…These different types of companies would also have very different cultures.
For a security awareness program to be effective, these considerations must be understood and the
program should be developed in a fashion that makes sense per environment – Shon Harris All-inone CISSP Certification Guide pg 109