What is ensured by an information security policy? ()

Question

Options

• AThe proper communication of the security posture of the organization
• BThat financial documents are securely backed up
• CThe correct handling of employee information on social networks
• DThe commitment of senior management to ensure that access to data is secure

• A
  3% (1)
• B
  7% (2)
• D
  90% (26)

Explanation

An information security policy is a high-level governance document that primarily demonstrates and formalizes senior management's commitment to protecting the organization's information assets. It sets the strategic direction, scope, and tone of the security program - essentially authorizing and backing all downstream security controls. While policies may communicate posture or address data handling, their most critical function is establishing that security is a top-down organizational commitment driven by leadership, not just an IT concern.

No community discussion yet for this question.