CISSP-ISSEP: Information Systems Security Engineering Professional

Question

A security policy is a broad, general statement issued by senior management that defines the role security has within the organization. What are the different types of policies? Each correct answer represents a complete solution. Choose all that apply.

Choose three

Explanation

The standard categories are regulatory, advisory, and informative policies. Regulatory policies mandate compliance, advisory policies recommend desired practices, and informative policies supply guidance or context without imposing requirements.

CISSP-ISSEP: Information Systems Security Engineering Professional

AstroTutor

Notes

Readiness

QuestionQ190

Community Discussion