Examkin

Question

Difficulty: MediumSecurity Governance Structures and Policy Frameworks

A global pharmaceutical corporation established an executive directive requiring all public-facing services to enforce robust transport layer security. To support this requirement, system administrators need specific, step-by-step operational instructions for configuring web server software to disable legacy protocols and enable approved cipher suites. Which of the following governance document types should the operations team create to fulfill this requirement?

  1. ProcedureAnswer
  2. B
    Guideline
  3. C
    Standard
  4. D
    Policy

Answer

Procedure
A procedure is a mandatory document that provides explicit, sequential, step-by-step instructions to carry out operational tasks and maintain compliance with technical standards.

Step-by-Step Solution

1
Analyze the scenario requirements
Identified the need for step-by-step, operational commands and tasks for system administrators.
Governance documents serve distinct roles based on whether they set goals, define technical specifications, give recommendations, or outline implementation steps.
2
Map the requirement to the security governance document hierarchy
High-level goals correspond to Policies, specific requirements correspond to Standards, advisory suggestions correspond to Guidelines, and sequential implementation tasks correspond to Procedures.
Procedures are operational, mandatory documents detailing the exact sequence of steps to perform a technical task.

Key Concept

Security Policy Hierarchy (Policies vs. Standards vs. Procedures vs. Guidelines)
Estimated Time:1m 15s
Rate this question

Topics

Security Governance Structures and Policy Frameworks

More questions from this topic