nerdexam
(ISC)2

CISSP-ISSEP · Question #147

Which of the following types of CNSS issuances establishes or describes policy and programs, provides authority, or assigns responsibilities?

The correct answer is B. Directives. Directives are the CNSS issuance type specifically designed to establish or describe policy and programs, provide authority, and assign responsibilities - making B correct. They represent the highest-level, authoritative documents within the CNSS issuance framework…

Governance and Training

Question

Which of the following types of CNSS issuances establishes or describes policy and programs, provides authority, or assigns responsibilities?

Options

  • AInstructions
  • BDirectives
  • CPolicies
  • DAdvisory memoranda

How the community answered

(43 responses)
  • A
    5% (2)
  • B
    91% (39)
  • C
    2% (1)
  • D
    2% (1)

Explanation

Directives are the CNSS issuance type specifically designed to establish or describe policy and programs, provide authority, and assign responsibilities - making B correct. They represent the highest-level, authoritative documents within the CNSS issuance framework.

Instructions (A) are wrong because they implement directives by providing specific procedures and requirements - they follow from directives rather than establishing authority themselves. Policies (C) is a distractor; while CNSS does reference policy, "Policies" is not one of the defined CNSS issuance categories in the same way Directives are - Directives are what establish policy. Advisory memoranda (D) are wrong because they are informational and recommendatory in nature, carrying no binding authority or responsibility assignments.

Memory tip: Think "Directives = Dictate" - they dictate authority, responsibility, and program structure. If a CNSS document is telling organizations what they must do and who is in charge, it's a Directive.

Topics

#CNSS issuances#Directives#Policy establishment#Government frameworks

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSEP Practice