CSSLP: Certified Secure Software Lifecycle Professional

Question

A security policy is a broad, high-level statement issued by senior management that defines the role of security within the organization. Which of the following must be addressed in a well-designed policy? Each correct answer represents part of the solution. Choose all that apply.

Choose three

Explanation

Security policies establish the protection objectives for organizational assets, address the risks that require protection, and define compliance responsibilities for those subject to the policy. A policy does not require identification of a specific person expected to exploit a vulnerability.

Learn more

CSSLP: Certified Secure Software Lifecycle Professional

AstroTutor

Notes

Readiness

QuestionQ63

Community Discussion