What is the PRIMARY difference between security policies and security procedures?

The correct answer is D. Policies are generic in nature, and procedures contain operational details. The primary difference between security policies and security procedures is that policies are generic in nature, and procedures contain operational details. Security policies are the high-level statements or rules that define the goals, objectives, and requirements of security fo

Submitted by weili_xi· Mar 5, 2026Security and Risk Management

Question

Options

APolicies are used to enforce violations, and procedures create penalties
BPolicies point to guidelines, and procedures are more contractual in nature
CPolicies are included in awareness training, and procedures give guidance
DPolicies are generic in nature, and procedures contain operational details

How the community answered

(20 responses)

B
5% (1)
C
10% (2)
D
85% (17)

Explanation

The primary difference between security policies and security procedures is that policies are generic in nature, and procedures contain operational details. Security policies are the high-level statements or rules that define the goals, objectives, and requirements of security for an organization. Security procedures are the low-level steps or actions that specify how to implement, enforce, and comply with the security policies.

Topics

#security policy#security procedures#governance#documentation

Community Discussion

No community discussion yet for this question.

Full CISSP Practice