Examkin

Question

Difficulty: EasySecurity Governance Structures and Policy Frameworks

An organization is updating its security governance framework to enforce consistent cryptographic controls across all network edge devices. The security team needs to publish a document that specifies mandatory technical configuration requirements, including exact encryption algorithms and key lengths that systems administrators must implement. Which of the following document types best fulfills this requirement?

  1. StandardAnswer
  2. B
    Guideline
  3. C
    Policy
  4. D
    Compensating Control

Answer

Standard
In enterprise governance, a Standard establishes compulsory, technical requirements and configuration specifications (such as mandating AES-256 encryption across edge devices) that administrators are obligated to enforce uniformly.

Step-by-Step Solution

1
Analyze the scenario requirement
The requirement asks for mandatory, specific technical parameters (cryptographic algorithms and key lengths) for system implementation.
Governance documents are categorized based on their level of technical abstraction and whether they are mandatory or discretionary.
2
Map the requirement to the governance document hierarchy
Documents that define compulsory operational parameters and technical configurations are classified as Standards.
Standards bridges high-level policy intent with actionable, mandatory technical requirements.

Key Concept

Governance Document Hierarchy: Standards vs Policies vs Guidelines
Rate this question

Topics

Security Governance Structures and Policy Frameworks

More questions from this topic