Examkin

Question

Difficulty: MediumSecurity Governance Structures and Policy Frameworks

A multinational logistics firm is standardizing its wireless network infrastructure across regional distribution hubs. IT leadership issues a mandatory document detailing exact technical requirements—such as requiring WPA3-Enterprise encryption for all wireless access points—that all regional engineering teams must strictly enforce without deviation. Which of the following governance document types describes this document?

  1. Security standardAnswer
  2. B
    Security guideline
  3. C
    Acceptable use policy
  4. D
    Compensating control

Answer

The document described is a security standard because it defines compulsory, exact technical requirements that must be enforced without deviation.
A security standard is a mandatory governance document that sets specific technical rules, hardware requirements, or configuration parameters that an organization must enforce uniformly. Specifying mandatory WPA3-Enterprise encryption across wireless access points is a classic example of a security standard.

Step-by-Step Solution

1
Analyze the mandatory nature and specific technical detail level of the governance document.
The document prescribes exact technical settings (WPA3-Enterprise encryption) and mandates strict enforcement across regional hubs.
Governance documents are categorized based on their level of abstraction and whether compliance is mandatory or discretionary.
2
Differentiate between policies, standards, baselines, and guidelines.
High-level goals represent policies; specific mandatory rules represent standards; minimum platform configurations represent baselines; recommendations represent guidelines.
Security standards bridge high-level policy goals with granular technical implementations.
3
Select the governance document type matching mandatory technical requirements.
Security standard is the exact match.
Standards require compliance without deviation across all applicable infrastructure components.

Key Concept

Security Governance Hierarchy (Policies, Standards, Baselines, Guidelines)
Rate this question

Topics

Security Governance Structures and Policy Frameworks

More questions from this topic