Exam 4: Information Security Policy

A(n)____________________,which is usually presented on a screen to the user during software installation,spells out fair and responsible use of the software being installed.

The policy administrator must be identified on the policy document as the primary contact for providing additional information or suggesting revisions to the policy._________________________

A(n)blow-by screen is an organizational tool to ensure that all the appropriate information security policy messages are presented to all the appropriate audiences._________________________

For instance,if policy mandates that all employees wear identification badges in a clearly visible location,and select members of management decide they are not required to follow this policy,any actions taken against other employees will ____.

To execute a policy,an organization must implement a set of ____________________ that clarify and define the policy.

Access control lists include user access lists,matrices,and capability tables._________________________

____________________ servers take organization-specific policies and code them in a special machine-readable language.

The ____________________ section of the ISSP should provide instructions to employees on how to report observed or suspected breaches of the usage and systems management policies.

The ____ section of the ISSP should specify users' and systems administrators' responsibilities.

The two groups of SysSPs are managerial guidance and ____.

During the ____ phase,the information security policy development team must provide for policy distribution.

A(n)issue-specific security policy sets the strategic direction,scope,and tone for all of an organization's security efforts._________________________

An ISSP will typically not cover the use of e-mail or the Internet.

The formulation of program policy in the ____________________ document establishes the overall information security environment.

The ____ section of an ISSP explains who can use the technology governed by the policy and for what purposes.

SysSPs focus on the proper handling of issues in the organization,like the use of technologies.

For most corporate documents,a score of ____ is preferred on the Flesch Reading Ease scale.

A(n)technical specifications SysSP document is created by management to guide the implementation and configuration of technology._________________________

An automated policy management system is able to assess readers' understanding of the policy and electronically record reader acknowledgments.

SysSPs often function as standards or procedures to be used when configuring or maintaining systems.