Examkin

Question

Difficulty: EasySecurity Governance Structures and Policy Frameworks

An enterprise executive board is drafting a high-level document that defines the organization's overarching commitment to information security, establishes security roles, and outlines broad strategic goals for risk management. Which security governance document type is the board preparing?

  1. Security policyAnswer
  2. B
    Security guideline
  3. C
    Security baseline
  4. D
    Security procedure

Answer

The board is preparing a security policy, which serves as the foundational, high-level executive directive defining overall security goals and governance roles.
A security policy is a foundational governance document crafted by senior management to define the organization's security commitment, assign broad responsibilities, and set overall risk management directives.

Step-by-Step Solution

1
Analyze the core objective described in the scenario.
The document expresses high-level executive commitment, security roles, and strategic risk management goals.
Governance documents are categorized based on their level of abstraction and target audience.
2
Map the objective to the governance policy hierarchy.
High-level management directives and organizational goals fall under the category of policies.
Policies represent top-tier mandatory governance documents from leadership.

Key Concept

Security policy hierarchy and document characteristics
Rate this question

Topics

Security Governance Structures and Policy Frameworks

More questions from this topic