A Security Policy Is an Overall General Statement Produced by Senior

question 90

Multiple Choice

A security policy is an overall general statement produced by senior management that dictates what role security plays within the organization. Which of the following are required to be addressed in a well designed policy? Each correct answer represents a part of the solution. Choose all that apply.

• A) Who is expected to exploit the vulnerability?
• B) What is being secured?
• C) Where is the vulnerability, threat, or risk?
• D) Who is expected to comply with the policy?

---

Definitions:

Memory Skills

The ability to encode, store, and retrieve information over time.

Passive Construction

In grammar, a sentence structure where the subject undergoes the action of the verb, often resulting in a shift of focus from the doer to the receiver of the action.

Sentences

A set of words that are put together to mean something.

Repetition

The act of doing or saying something multiple times in order to learn, memorize, emphasize, or achieve proficiency.