Soru

Zorluk: KolaySecurity Governance Structures and Policy Frameworks

An IT manager wants to issue recommendations and practical advice to help remote employees secure their home Wi-Fi networks. The document provides optional best practices rather than mandatory operational requirements. Which type of security governance document should the IT manager publish?

  1. Security guidelineCevap
  2. B
    Security policy
  3. C
    Security standard
  4. D
    Security baseline

Cevap

Security guideline
Security guidelines provide non-mandatory best practices and recommendations that help users achieve security goals without imposing strict compulsory rules.

Adım Adım Çözüm

1
Analyze the nature of the documentation requirement in the scenario.
The scenario describes optional advice and best-practice recommendations rather than mandatory operational constraints.
Governance documents are categorized based on whether their contents are mandatory or discretionary.
2
Match the requirement to the appropriate security governance document type.
Guidelines are non-mandatory, discretionary documents providing guidance and recommended practices.
Policies, standards, and baselines all enforce mandatory compliance, whereas guidelines provide non-binding recommendations.

Anahtar Kavram

Distinguishing between mandatory governance documents (Policies, Standards, Baselines) and discretionary governance documents (Guidelines).
Tahmini Süre:45s
Bu soruyu puanla