Isaca
CISM · Question #971
Which of the following establishes the minimum technical baseline for security controls?
The correct answer is B. Standards. Standards define mandatory minimum technical requirements (the baseline) that security controls must meet; policies set direction, guidelines are optional recommendations, and procedures describe how to implement.
Submitted by carter_n· Apr 18, 2026Information Security Governance
Question
Which of the following establishes the minimum technical baseline for security controls?
Options
- AProcedures
- BStandards
- CGuidelines
- DPolicies
How the community answered
(36 responses)- A3% (1)
- B94% (34)
- C3% (1)
Explanation
Standards define mandatory minimum technical requirements (the baseline) that security controls must meet; policies set direction, guidelines are optional recommendations, and procedures describe how to implement.
Topics
#Security standards#Technical baseline#Security documentation#Information security governance
Community Discussion
No community discussion yet for this question.