Exam 4: Information Security Policy

In order to avoid reprisal or retaliation against employees,reporting of violations of policy should be set up to be ____________________ .

Configuration codes entered into security systems to guide the execution of the system when information is passing through it are called ____.

A disadvantage of creating a number of independent ISSP documents is that the result may ____.

Granularity is the level of specificity and detail with which administrators can control access to their systems._________________________

The policy administrator must be technically oriented.

The ISSP sections Authorized Access and Usage of Equipment and Prohibited Usage of Equipment may be combined into a section called ____.

A(n)standard is a more detailed statement of what must be done to comply with a policy._________________________

The ____ layer is the outermost layer of the bull's-eye model,hence the first to be assessed for marginal improvement.

Today,most EULAs are presented on blow-by screens.

Which of the following is a type of information security policy that deals with the entirety of an organization's information security efforts?

The responsibilities of both the users and the systems administrators with regard to specific technology rules should be specified in the ____________________ section of the ISSP.

If multiple audiences exist for information security policies,different documents must be created for each audience.

____ comprise a set of rules that dictates acceptable and unacceptable behavior within an organization.

The policy champion and manager is called the ____.

Which of the following is NOT a guideline that may help in the formulation of information technology (IT)policy as well as information security policy?

Unless a policy actually reaches the end users,it cannot be enforced.

A(n)enterprise information security policy is a type of information security policy that provides detailed,targeted guidance to instruct all members of the organization in the use of technology-based systems._________________________

A standard is built from a ____.

A disadvantage of creating a single comprehensive ISSP document is that such a document ____.

Which of the following is true about information security policy?