Multiple Choice
A policy is
A) Procedures that tell units when it would be nice if things were operated a certain way, but it is not a requirement to do so
B) Guidelines to users and customers on what is appropriate and what is not appropriate to do with information technology resources
C) A document that records a high-level principle or course of action that has been decided on
D) A defined set of rules, accepted and adopted by several organizations
Correct Answer:

Verified
Correct Answer:
Verified
Q9: It is generally advised to consolidate all
Q10: The first section of a policy generally
Q11: From the perspective of information security, the
Q12: In the United States one of the
Q13: Who or what is covered by the
Q15: Key information security issues for which an
Q16: From the perspective of information security, the
Q17: The need for the policy is specified
Q18: Policies, standards and guidelines are useful because
Q19: Policy review is usually triggered by all