CSSLP · Question #261
A security policy is an overall general statement produced by senior management that dictates what role security plays within the organization. What are the different types of policies? Each correct a
The correct answer is A. Advisory C. Informative D. Regulatory. The question asks to identify different categories of security policies found within an organization.
Question
A security policy is an overall general statement produced by senior management that dictates what role security plays within the organization. What are the different types of policies? Each correct answer represents a complete solution. Choose all that apply.
Options
- AAdvisory
- BSystematic
- CInformative
- DRegulatory
How the community answered
(47 responses)- A87% (41)
- B13% (6)
Why each option
The question asks to identify different categories of security policies found within an organization.
Advisory policies are not mandatory but are strongly recommended for employees to follow, providing guidance on best practices.
"Systematic" is not a recognized type of security policy in the context of how policies are categorized by their nature or enforcement (e.g., regulatory, advisory, informative, procedural).
Informative policies serve to educate employees about specific security issues, risks, or compliance requirements without necessarily dictating strict rules.
Regulatory policies are mandatory policies imposed by laws, regulations, or industry standards that the organization must comply with.
Concept tested: Types of security policies
Topics
Community Discussion
No community discussion yet for this question.