Which of the following BEST indicates misalignment of security policies with business objectives?
Low completion rate of employee awareness training
Lack of adequate funding for the security program
A large number of long-term policy exceptions
A large number of user noncompliance incidents
Submit