CERTIFIED-IN-CYBERSECURITY · Question #333
Which of the following documents establishes context and sets out strategic direction and priorities?
The correct answer is C. Policies. Policies are high-level governance documents created by management that define an organization's intent, strategic direction, principles, and acceptable behaviors around a given topic (e.g., an Acceptable Use Policy or Information Security Policy). Regulations are externally…
Question
Which of the following documents establishes context and sets out strategic direction and priorities?
Options
- ARegulations
- BStandards
- CPolicies
- DProcedures
How the community answered
(41 responses)- A2% (1)
- B2% (1)
- C90% (37)
- D5% (2)
Explanation
Policies are high-level governance documents created by management that define an organization's intent, strategic direction, principles, and acceptable behaviors around a given topic (e.g., an Acceptable Use Policy or Information Security Policy). Regulations are externally imposed legal requirements (e.g., GDPR, HIPAA). Standards specify mandatory, measurable requirements or benchmarks that support policies (e.g., password must be 12+ characters). Procedures are detailed, step-by-step operational instructions for carrying out tasks. The hierarchy is: Policy → Standard → Guideline → Procedure.
Topics
Community Discussion
No community discussion yet for this question.