Examkin

Question

Difficulty: MediumSecurity Governance Structures and Policy Frameworks

An enterprise security team is establishing formal documentation for employee mobile devices connecting to the corporate network. Management mandates a technical document that defines enforced minimum security parameters, including mandatory AES-256 storage encryption, minimum operating system patch levels, and a mandatory 12-character passcode length. Which type of security governance document should be published to enforce these mandatory minimum technical configurations?

  1. A security baselineAnswer
  2. B
    A security guideline
  3. C
    An acceptable use policy
  4. D
    A standard operating procedure

Answer

A security baseline is the governance document used to specify mandatory minimum configuration standards and technical benchmarks across systems or devices.
A security baseline establishes compulsory minimum configuration requirements and security benchmarks that systems or devices must meet prior to network deployment.

Step-by-Step Solution

1
Identify the nature of the requirements described in the scenario
The scenario requires establishing mandatory minimum technical settings (encryption algorithm, OS version, password length) for endpoints.
Security governance documents are categorized by whether they set high-level directives, operational steps, mandatory technical benchmarks, or discretionary suggestions.
2
Map the technical requirement to the correct governance hierarchy tier
Minimum technical configurations and security hardening settings correspond directly to a security baseline.
Baselines serve as the mandatory threshold for system builds and hardware provisioning across an organization.

Key Concept

Security Baselines and Policy Hierarchy
Rate this question

Topics

Security Governance Structures and Policy Frameworks

More questions from this topic