Examkin

Soru

Zorluk: OrtaSecurity Governance Structures and Policy Frameworks

An enterprise executive committee issues a high-level mandate requiring all internal data transmissions containing sensitive customer information to be strongly encrypted. To implement this directive across the organization, the IT security team publishes a mandatory technical document establishing the exact approved cipher suites, minimum key lengths, and required protocol versions that all systems must comply with. Which of the following governance document types is represented by this mandatory technical document?

  1. Security StandardCevap
  2. B
    Security Guideline
  3. C
    Security Policy
  4. D
    Standard Operating Procedure

Cevap

The technical specification document is a Security Standard because it contains compulsory technical requirements and configurations that operationalize high-level policy mandates.
A Security Standard specifies compulsory, measurable technical criteria—such as explicit encryption algorithms, minimum key sizes, and approved protocols—that must be implemented to fulfill a broader policy objective.

Adım Adım Çözüm

1
Analyze the enforceability and specificity described in the scenario stem.
The document is mandatory and contains exact technical requirements (cipher suites, key lengths, protocol versions).
Governance documents are differentiated by their level of technical detail and whether compliance is mandatory or optional.
2
Compare the document characteristics against the governance document hierarchy.
High-level rules are policies; specific mandatory settings are standards; step-by-step tasks are procedures; optional suggestions are guidelines.
Standards bridges high-level policy intent with mandatory, measurable technical controls.

Anahtar Kavram

Information Security Governance Hierarchy (Policies, Standards, Baselines, Guidelines, Procedures)
Tahmini Süre:1m 15s
Bu soruyu puanla

Konular

Security Governance Structures and Policy Frameworks

Bu konudan daha fazla soru