nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #530

What is the purpose of a policy?

The correct answer is A. To guide behavior, set standards, and ensure organizational compliance. A policy is a high-level document that guides behavior, sets organizational standards, and ensures compliance with rules and regulations. Policies define what must be done and why, without prescribing exactly how. Option B describes a procedure, which provides step-by-step…

Security Principles

Question

What is the purpose of a policy?

Options

  • ATo guide behavior, set standards, and ensure organizational compliance
  • BTo provide specific step-by-step instructions to accomplish a task or process
  • CTo provide a set of criteria to be met
  • DTo enforce specific requirements for cybersecurity and can carry penalties for non-compliance

How the community answered

(68 responses)
  • A
    87% (59)
  • B
    1% (1)
  • C
    4% (3)
  • D
    7% (5)

Explanation

A policy is a high-level document that guides behavior, sets organizational standards, and ensures compliance with rules and regulations. Policies define what must be done and why, without prescribing exactly how. Option B describes a procedure, which provides step-by-step instructions. Option C describes a standard or baseline, which sets specific measurable criteria. Option D describes a regulation or law, which carries legal penalties - policies are internal organizational documents, not regulatory instruments, though they may be created to comply with regulations.

Topics

#Policy#Governance#Compliance#Standards

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice