Examkin

Question

Difficulty: MediumSecurity Governance Structures and Policy Frameworks

A financial technology firm's executive board issues a high-level directive requiring all employee remote access connections to utilize multi-factor authentication. To implement this directive across the organization, the security operations team must publish a mandatory document that defines the specific technical controls and required configuration rules for all remote access gateways. Which governance document type should the team publish to establish these mandatory requirements?

  1. Security StandardAnswer
  2. B
    Security Guideline
  3. C
    Standard Operating Procedure
  4. D
    Acceptable Use Policy

Answer

Security Standard
A security standard translates high-level policy objectives into specific, mandatory technical rules and configuration requirements that technical teams must adhere to.

Step-by-Step Solution

1
Analyze the scenario requirements
The requirement demands a mandatory governance document that defines specific technical requirements and configuration rules to fulfill an executive policy directive.
Governance document types exist in a strict hierarchy based on authority, enforcement status, and technical granularity.
2
Evaluate the distinction between policy hierarchy documents
Policies state high-level management intent. Standards translate high-level policies into mandatory, non-negotiable technical requirements and configuration rules.
Technical teams require enforceable standards to ensure consistent application of mandatory security controls across all systems.

Key Concept

Security Standards vs. Guidelines, Policies, and Procedures
Rate this question

Topics

Security Governance Structures and Policy Frameworks

More questions from this topic