Examkin

Soru

Zorluk: OrtaSecurity Governance Structures and Policy Frameworks

An enterprise streaming media organization's executive security leadership issues an overarching mandate requiring all internal network microservices to enforce strict cryptographic protection. To enact this, the cloud engineering team publishes a document specifying mandatory technical requirements, including the exact protocol (mTLS) and minimum key lengths that all production container clusters must enforce without exception. Which of the following governance document types best categorizes this technical mandate?

  1. A
    Security guideline
  2. Security standardCevap
  3. C
    Security policy
  4. D
    Compensating control

Cevap

Security standard
The correct answer is the option designating a security standard. In security governance frameworks, a policy sets high-level executive intent, while a security standard establishes compulsory, non-discretionary rules and technical parameters (such as protocol and key length mandates) required to comply with that policy across the enterprise.

Adım Adım Çözüm

1
Analyze the scenario requirements
The document specifies non-discretionary, mandatory technical controls (mTLS with defined key lengths) supporting an executive directive.
Governance documents are differentiated by their level of technical specificity and operational enforceability.
2
Compare governance document characteristics
Policies state high-level directives, standards specify mandatory technical parameters, guidelines provide optional advice, and baselines define minimum operational benchmarks.
Matching the document's characteristics against standard governance definitions establishes its role.
3
Select the appropriate governance document level
Because this document contains mandatory technical specifications enforcing a higher-level directive, it represents a security standard.
Standards bridges high-level executive policies and specific operational implementations.

Anahtar Kavram

Distinction between Security Policies, Standards, Guidelines, and Baselines
Bu soruyu puanla

Konular

Security Governance Structures and Policy Frameworks

Bu konudan daha fazla soru