SSCP · Question #304
Which of the following choice is NOT normally part of the questions that would be asked in regards to an organization's information security policy?
The correct answer is C. What are the actions that need to be performed in case of a disaster? Actions to be performed in case of a disaster are not normally part of an information security policy but part of a Disaster Recovery Plan (DRP). Only personnel implicated in the plan should have a copy of the Disaster Recovery Plan whereas everyone should be aware of the…
Question
Which of the following choice is NOT normally part of the questions that would be asked in regards to an organization's information security policy?
Options
- AWho is involved in establishing the security policy?
- BWhere is the organization's security policy defined?
- CWhat are the actions that need to be performed in case of a disaster?
- DWho is responsible for monitoring compliance to the organization's security policy?
How the community answered
(26 responses)- A8% (2)
- C88% (23)
- D4% (1)
Explanation
Actions to be performed in case of a disaster are not normally part of an information security policy but part of a Disaster Recovery Plan (DRP). Only personnel implicated in the plan should have a copy of the Disaster Recovery Plan whereas everyone should be aware of the contents of the organization's information security policy.
Topics
Community Discussion
No community discussion yet for this question.