In order to demonstrate support for security, top management must ________.

• A. ensure that security has an adequate budget
• B. support security when there are conflicts between the needs of security and the needs of other business functions
• C. follow security procedures themselves
• D. All of the above

Answer: (D)

Demonstrating support for security means leadership acts on three practical fronts: giving security the resources it needs, standing by security priorities when they clash with other business demands, and modeling compliant behavior themselves. With an adequate budget, the security program has the people, tools, and training required to implement and sustain controls. When security competes with other needs, top management must back security priorities, signaling that risk management takes precedence and that appropriate tradeoffs will be made rather than compromising security. By following security procedures personally, executives show that policies are real expectations, not mere guidelines, which helps instill a culture of discipline and accountability. Together, these actions convey a strong, consistent message that security is an integral part of how the organization operates. Without all three, support is incomplete because resources, prioritization, and behavioral modeling are all essential to truly embed security into the organizational fabric.