Examkin

Question

Difficulty: EasySecurity Governance Structures and Policy Frameworks

An organization's security team is publishing advisory recommendations and suggestions for employees working remotely. These document entries offer non-mandatory best practices to help staff maintain clean home workspaces, but they do not enforce strict operational compliance. Which of the following governance document types best describes these advisory recommendations?

  1. GuidelinesAnswer
  2. B
    Policies
  3. C
    Standards
  4. D
    Baselines

Answer

Guidelines are non-mandatory governance documents providing advisory best practices.
Guidelines represent discretionary, non-binding documents within a security governance framework. They offer helpful suggestions and recommended practices to aid staff while allowing flexibility.

Step-by-Step Solution

1
Identify the mandatory status of the document described in the scenario.
The document provides non-mandatory, advisory recommendations.
Governance documents are categorized based on whether compliance is mandatory or discretionary.
2
Compare the scenario characteristics against the security policy hierarchy.
Guidelines are discretionary/optional recommendations, whereas Policies, Standards, and Baselines are mandatory.
Guidelines assist personnel by suggesting best practices without establishing strict compulsory rules.

Key Concept

Security Governance Policy Hierarchy: Guidelines vs. Mandatory Documents
Rate this question

Topics

Security Governance Structures and Policy Frameworks

More questions from this topic