A security professional has been promoted to be the CISO of an organization. The first task is to create a security policy for this organization. The CISO creates and publishes the security policy.
This policy however, is ignored and not enforced consistently. Which of the following is the MOST likely reason for the policy shortcomings?
The success of the Chief Information Security Officer is MOST dependent upon:
Within an organization's vulnerability management program, who has the responsibility to implement remediation actions?
