Examkin

Question

Difficulty: HardSecurity Governance Structures and Policy Frameworks

Following an executive directive mandating strict software supply chain security, an enterprise security architect publishes a technical document for application development teams. The document establishes mandatory technical criteria, including requiring all container images to be cryptographically signed and prohibiting deployment if any unresolved critical vulnerabilities are detected. While the document does not outline tool-specific step-by-step workflow actions, adherence to these quantitative rules is strictly compulsory across all engineering teams. Which of the following security governance document types is represented by this technical specification?

  1. A
    Guideline
  2. StandardAnswer
  3. C
    Baseline
  4. D
    Procedure

Answer

Standard
A security standard specifies mandatory technical, operational, or behavioral rules that support high-level enterprise policies. Because the document introduces mandatory technical criteria (container signature verification and zero critical vulnerability thresholds) that must be strictly followed without defining step-by-step tactical instructions, it functions as a security standard.

Step-by-Step Solution

1
Analyze the core characteristics and enforceability of the document described in the scenario.
The specification sets mandatory, specific technical requirements (container signing and vulnerability criteria) that engineering teams must strictly follow.
Governance documents in an enterprise hierarchy are classified based on their level of technical specificity, enforceability, and operational purpose.
2
Evaluate how the document compares to distinct governance levels.
It translates high-level policy objectives into compulsory technical rules without prescribing step-by-step execution tasks (procedures) or platform-specific hardening images (baselines).
Standards define the compulsory quantitative or technical boundaries necessary to achieve compliance with high-level policies.
3
Identify the correct governance element.
The document represents a security standard.
A standard enforces mandatory technical criteria across an enterprise while leaving individual procedural steps to team-level implementation.

Key Concept

Security Governance Hierarchy (Policies, Standards, Baselines, Guidelines, Procedures)
Rate this question

Topics

Security Governance Structures and Policy Frameworks

More questions from this topic