What is security awareness?

• A. Consciousness of an existing security program, its relevance, and the effect of one's behavior on reducing security risks.
• B. Knowledge of the latest security threats only.
• C. The ability to recall emergency contact numbers.
• D. A training program focused solely on physical security measures.

Answer: (A)

Security awareness is being mindful of the security program, understanding why it matters, and recognizing that your daily actions influence security risks. It means you follow policies, know how to spot and report suspicious activity, and choose behaviors that reduce risk—like using strong passwords, not sharing credentials, locking your workstation, and handling sensitive information carefully. It isn’t just knowing about threats, recalling emergency numbers, or a narrow focus on physical security; it’s a broad mindset that covers how both cyber and physical controls work and how individuals’ choices affect the organization’s security posture. This awareness is ongoing, reinforced through training and practice, and built into everyday work rather than treated as a one-time event.