CGRC · Question #36
Which of the following is NOT an objective of the security program? Response:
The correct answer is A. Security plan. A security program aims to achieve goals like education, organization, and classification, while a security plan is a document that describes how these objectives will be met, rather than being an objective itself.
Question
Which of the following is NOT an objective of the security program? Response:
Options
- ASecurity plan
- BSecurity education
- CSecurity organization
- DInformation classification
How the community answered
(38 responses)- A95% (36)
- B3% (1)
- D3% (1)
Why each option
A security program aims to achieve goals like education, organization, and classification, while a security plan is a document that describes how these objectives will be met, rather than being an objective itself.
A security plan is a document that outlines the strategy, policies, and procedures for how an organization will manage its information security, detailing how security objectives are achieved. It is a means to an end, not an objective in itself.
Security education and awareness is a critical objective of any security program, ensuring personnel understand their roles and responsibilities in protecting information.
Establishing a security organization (roles, responsibilities, structure) is an objective to ensure accountability and effective management of the security program.
Information classification is a fundamental objective to identify and categorize information assets based on their sensitivity, leading to appropriate protection measures.
Concept tested: Components and objectives of a security program
Topics
Community Discussion
No community discussion yet for this question.