CERTIFIED-IN-CYBERSECURITY · Question #530
What is the purpose of a policy?
The correct answer is A. To guide behavior, set standards, and ensure organizational compliance. A policy is a high-level document that guides behavior, sets organizational standards, and ensures compliance with rules and regulations. Policies define what must be done and why, without prescribing exactly how. Option B describes a procedure, which provides step-by-step…
Question
What is the purpose of a policy?
Options
- ATo guide behavior, set standards, and ensure organizational compliance
- BTo provide specific step-by-step instructions to accomplish a task or process
- CTo provide a set of criteria to be met
- DTo enforce specific requirements for cybersecurity and can carry penalties for non-compliance
How the community answered
(68 responses)- A87% (59)
- B1% (1)
- C4% (3)
- D7% (5)
Explanation
A policy is a high-level document that guides behavior, sets organizational standards, and ensures compliance with rules and regulations. Policies define what must be done and why, without prescribing exactly how. Option B describes a procedure, which provides step-by-step instructions. Option C describes a standard or baseline, which sets specific measurable criteria. Option D describes a regulation or law, which carries legal penalties - policies are internal organizational documents, not regulatory instruments, though they may be created to comply with regulations.
Topics
Community Discussion
No community discussion yet for this question.