What is the purpose of a security policy?

The correct answer is C. All of the above. A security policy serves multiple interconnected purposes simultaneously. It defines the organization's security goals (D), establishes guidelines and procedures for secure operation (B), and informs the risk identification and assessment process (A). Because a well-written…

Security Principles

Question

Options

ATo identify and assess risks
BTo establish guidelines and procedures for secure operation
CAll of the above
DTo define the organization's security goals

How the community answered

(29 responses)

B
7% (2)
C
90% (26)
D
3% (1)

Explanation

A security policy serves multiple interconnected purposes simultaneously. It defines the organization's security goals (D), establishes guidelines and procedures for secure operation (B), and informs the risk identification and assessment process (A). Because a well-written security policy encompasses all three functions - goal-setting, procedural guidance, and risk awareness - 'All of the above' (C) is the most complete and correct answer. No single purpose alone captures the full scope of what a security policy does.

Topics

#Security Policies#Information Security Governance#Risk Management

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice