Examkin

Question

Difficulty: MediumSecurity Governance Structures and Policy Frameworks

An enterprise executive committee issues a high-level mandate requiring all internal data transmissions containing sensitive customer information to be strongly encrypted. To implement this directive across the organization, the IT security team publishes a mandatory technical document establishing the exact approved cipher suites, minimum key lengths, and required protocol versions that all systems must comply with. Which of the following governance document types is represented by this mandatory technical document?

  1. Security StandardAnswer
  2. B
    Security Guideline
  3. C
    Security Policy
  4. D
    Standard Operating Procedure

Answer

The technical specification document is a Security Standard because it contains compulsory technical requirements and configurations that operationalize high-level policy mandates.
A Security Standard specifies compulsory, measurable technical criteria—such as explicit encryption algorithms, minimum key sizes, and approved protocols—that must be implemented to fulfill a broader policy objective.

Step-by-Step Solution

1
Analyze the enforceability and specificity described in the scenario stem.
The document is mandatory and contains exact technical requirements (cipher suites, key lengths, protocol versions).
Governance documents are differentiated by their level of technical detail and whether compliance is mandatory or optional.
2
Compare the document characteristics against the governance document hierarchy.
High-level rules are policies; specific mandatory settings are standards; step-by-step tasks are procedures; optional suggestions are guidelines.
Standards bridges high-level policy intent with mandatory, measurable technical controls.

Key Concept

Information Security Governance Hierarchy (Policies, Standards, Baselines, Guidelines, Procedures)
Estimated Time:1m 15s
Rate this question

Topics

Security Governance Structures and Policy Frameworks

More questions from this topic