Exam 712-50 topic 1 question 23 discussion

D D. Lack of a formal security awareness program. Without a security awareness program, employees may not fully understand the policy, its importance, or their role in enforcing it, leading to it being ignored or inconsistently applied.

Lack of a formal security policy governance process: This is the most probable reason for the policy being ignored. Governance involves not just the creation of policies but also the mechanisms for enforcement, monitoring, and reviewing those policies. If there's no formal governance process, there's likely no mechanism to ensure that the policy is integrated into daily operations, no accountability for non-compliance, and no regular reviews or updates to the policy. All of these factors can lead to a policy being ignored or inconsistently enforced.

B is correct. Refer to https://vceguide.com/which-of-the-following-is-the-most-likely-reason-for-the-policy-shortcomings/

B makes sense as a governance process would ensure the policies are rolled out and adopted. part of this would be defining the roles and responsibilities so also answer C

Lack of Security Awareness Program