Which of the following is NOT an objective of the security program?

The correct answer is B. Security plan. The core objectives of a security program typically include: establishing a security organization (defining roles, responsibilities, and governance), conducting security education and awareness training, and implementing information classification to protect data based on…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Options

ASecurity organization
BSecurity plan
CSecurity education
DInformation classification

How the community answered

(52 responses)

A
4% (2)
B
94% (49)
D
2% (1)

Explanation

The core objectives of a security program typically include: establishing a security organization (defining roles, responsibilities, and governance), conducting security education and awareness training, and implementing information classification to protect data based on sensitivity. A security plan is a document or artifact produced as an output of the security program - it is a tool used to document and communicate how security objectives will be achieved, not an objective in itself. Therefore, 'Security plan' is NOT an objective of the security program but rather a deliverable or mechanism through which the program's objectives are pursued.

Topics

#Security Program Objectives#Security Governance#Security Management#Program Components

Community Discussion

No community discussion yet for this question.

Full CAP Practice