CERTIFIED-IN-CYBERSECURITY · Question #715
Which term refers to a formalized statement that defines an organization's stance on a particular security issue?
The correct answer is A. Security policy. A security policy is a high-level, formal document that states management's intent and the organization's position on a specific security topic (e.g., acceptable use, password requirements). It defines the 'what' and 'why.' A security standard (B) specifies specific mandatory…
Question
Which term refers to a formalized statement that defines an organization's stance on a particular security issue?
Options
- ASecurity policy
- BSecurity standard
- CSecurity procedure
- DSecurity guideline
How the community answered
(46 responses)- A93% (43)
- C2% (1)
- D4% (2)
Explanation
A security policy is a high-level, formal document that states management's intent and the organization's position on a specific security topic (e.g., acceptable use, password requirements). It defines the 'what' and 'why.' A security standard (B) specifies specific mandatory requirements to support a policy. A security procedure (C) provides step-by-step instructions on how to implement a policy or standard. A security guideline (D) offers non-mandatory recommendations and best practices. Policies are the top-level governance documents from which standards, procedures, and guidelines flow.
Topics
Community Discussion
No community discussion yet for this question.