CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ187

VerifiedSecure Software Concepts

A security policy is a broad, general statement issued by senior management that defines the role security has within the organization. What are the various types of policies? Each correct answer represents a complete solution. Choose all that apply.

Choose three
Explanation

The standard categories of security policy are regulatory, advisory, and informative. Regulatory policies address mandatory legal or compliance obligations, advisory policies recommend expected practices, and informative policies communicate information without imposing requirements.

Community Discussion

No comments yet. Be the first to start the discussion!