Organizations should communicate with system users throughout the development of the security program, letting them know that changes are coming, and reduce resistance to these expected changes through communication, education, and involvement.

Yes it is true. The organization should indeed communicate with a system user throughout the development of a security program. A corporation needs a security policy that must be developed by management at all levels, including organization and employees at the operational level. For a corporate security plan, it is essential to reduce the resistance of the expected changes and define the objective.

Explanation:

Three objectives of the security plan in an organization are:

Identify the sensitive system and plan Create and define the strategy and control of the system. Develop and implement the training programs.

Security Information is one of the essential factors in the organization. For an organization, the information should be protected.