Examkin

Soru

Zorluk: OrtaSecurity Governance Structures and Policy Frameworks

A global pharmaceutical corporation established an executive directive requiring all public-facing services to enforce robust transport layer security. To support this requirement, system administrators need specific, step-by-step operational instructions for configuring web server software to disable legacy protocols and enable approved cipher suites. Which of the following governance document types should the operations team create to fulfill this requirement?

  1. ProcedureCevap
  2. B
    Guideline
  3. C
    Standard
  4. D
    Policy

Cevap

Procedure
A procedure is a mandatory document that provides explicit, sequential, step-by-step instructions to carry out operational tasks and maintain compliance with technical standards.

Adım Adım Çözüm

1
Analyze the scenario requirements
Identified the need for step-by-step, operational commands and tasks for system administrators.
Governance documents serve distinct roles based on whether they set goals, define technical specifications, give recommendations, or outline implementation steps.
2
Map the requirement to the security governance document hierarchy
High-level goals correspond to Policies, specific requirements correspond to Standards, advisory suggestions correspond to Guidelines, and sequential implementation tasks correspond to Procedures.
Procedures are operational, mandatory documents detailing the exact sequence of steps to perform a technical task.

Anahtar Kavram

Security Policy Hierarchy (Policies vs. Standards vs. Procedures vs. Guidelines)
Tahmini Süre:1m 15s
Bu soruyu puanla

Konular

Security Governance Structures and Policy Frameworks

Bu konudan daha fazla soru