Match each security governance document type on the left with its corresponding characteristic on the right.
- Security PolicyHigh-level management statement establishing mandatory security goals and organizational intent.
- Security StandardMandatory course of action or technical requirement establishing uniform compliance rules.
- Security BaselineMandatory minimum security configuration required for a specific system or asset class.
- Security GuidelineDiscretionary recommendation providing advisory guidance and operational best practices.
Cevap
Security Policy matches High-level management statement establishing mandatory security goals; Security Standard matches Mandatory course of action or technical requirement establishing uniform compliance rules; Security Baseline matches Mandatory minimum security configuration required for a specific system; Security Guideline matches Discretionary recommendation providing advisory guidance.
Security Governance documents are categorized by scope and enforcement level: Policies set high-level executive intent, Standards dictate specific mandatory rules, Baselines enforce minimum system build configurations, and Guidelines offer discretionary advice.
Adım Adım Çözüm
Anahtar Kavram
Security Policy Hierarchy and Document Classification