Examkin

Soru

Zorluk: KolaySecurity Governance Structures and Policy Frameworks

An enterprise executive board is drafting a high-level document that defines the organization's overarching commitment to information security, establishes security roles, and outlines broad strategic goals for risk management. Which security governance document type is the board preparing?

  1. Security policyCevap
  2. B
    Security guideline
  3. C
    Security baseline
  4. D
    Security procedure

Cevap

The board is preparing a security policy, which serves as the foundational, high-level executive directive defining overall security goals and governance roles.
A security policy is a foundational governance document crafted by senior management to define the organization's security commitment, assign broad responsibilities, and set overall risk management directives.

Adım Adım Çözüm

1
Analyze the core objective described in the scenario.
The document expresses high-level executive commitment, security roles, and strategic risk management goals.
Governance documents are categorized based on their level of abstraction and target audience.
2
Map the objective to the governance policy hierarchy.
High-level management directives and organizational goals fall under the category of policies.
Policies represent top-tier mandatory governance documents from leadership.

Anahtar Kavram

Security policy hierarchy and document characteristics
Bu soruyu puanla

Konular

Security Governance Structures and Policy Frameworks

Bu konudan daha fazla soru