Examkin

Question

Difficulty: EasySecurity Governance Structures and Policy Frameworks

An IT manager wants to issue recommendations and practical advice to help remote employees secure their home Wi-Fi networks. The document provides optional best practices rather than mandatory operational requirements. Which type of security governance document should the IT manager publish?

  1. Security guidelineAnswer
  2. B
    Security policy
  3. C
    Security standard
  4. D
    Security baseline

Answer

Security guideline
Security guidelines provide non-mandatory best practices and recommendations that help users achieve security goals without imposing strict compulsory rules.

Step-by-Step Solution

1
Analyze the nature of the documentation requirement in the scenario.
The scenario describes optional advice and best-practice recommendations rather than mandatory operational constraints.
Governance documents are categorized based on whether their contents are mandatory or discretionary.
2
Match the requirement to the appropriate security governance document type.
Guidelines are non-mandatory, discretionary documents providing guidance and recommended practices.
Policies, standards, and baselines all enforce mandatory compliance, whereas guidelines provide non-binding recommendations.

Key Concept

Distinguishing between mandatory governance documents (Policies, Standards, Baselines) and discretionary governance documents (Guidelines).
Estimated Time:45s
Rate this question

Topics

Security Governance Structures and Policy Frameworks

More questions from this topic