Which of the following is MOST important when developing an AI security awareness program?
Correct Answer: B
The correct answer is B because awareness training is most effective when it is aligned with user roles, responsibilities, and exposure to risk. An AI security awareness program should address how different users interact with AI tools, what data they may enter, what decisions they may make, and what risks apply to their specific functions. For example, developers, executives, analysts, HR staff, legal teams, and general users may face different AI-related risks. Interactive training can improve engagement, but it is not more important than relevance to the user's role. Defining the level of interaction with AI is useful input for tailoring the program, but the broader objective is role-based training. Assessing organizational maturity may help planning, but it does not ensure users receive relevant guidance. CISM program management emphasizes awareness and training appropriate to roles and responsibilities. Therefore, aligning training to user roles is the most important consideration.
Reference: CISM Information Security Program Development and Management; security awareness, role- based training, AI risk awareness, and user responsibility principles.