Exam 4: Information Security Policy

Some policies incorporate a ____ indicating a specific date the policy will expire.

The Flesch-Kincaid Grade Level score evaluates writing on a U.S.grade-school level.

The steps outlined in guidelines must meet the requirements of the standards from which they were created.

The ____________________ information security program policy is the highest level of policy.

All rule-based policies must deal with users directly.

It is during the design phase of the SecSDLC that the policy development team must provide for policy distribution._________________________

Standards are created from ____.

____________________ are the specific configuration codes entered into security systems to guide the execution of the system when information is passing through it.

When a policy is created and distributed without software automation tools,it is often not clear which manager has approved it.

The two general methods of implementing technical controls are access control lists and configuration rules._________________________

For policies to be effective,they must be properly formally agreed to by act or ____________________.

SysSPs can be separated into two general groups: managerial guidance and ____________________.

Describe the advantages and disadvantages of using a modular approach for creating and managing the ISSP.