CIPT: Certified Information Privacy TechnologistDemo

By IAPP · Question Mode

QuestionQ323

Foundational Principles

When developing security policies, what is the most important consideration?

  • A Require all employees to read and acknowledge their understanding
  • B Ensure they are based on the organization's risk profile
  • C Ensure they cover enough details for common situations
  • D Follow industry best practices
Explanation

Security policies should be based on the organization’s risk profile so that controls and requirements address the risks most relevant to its assets, operations, and risk tolerance.

Community Discussion

No comments yet. Be the first to start the discussion!