QuestionQ42

VerifiedSecurity Concepts and Practices

Which of the following is not normally among the questions asked regarding an organization’s information security policy?

Explanation

Information security policies define security governance, including policy ownership, where the policy is established, and responsibility for compliance oversight. Detailed actions required during a disaster are normally defined in disaster recovery or incident-response plans and procedures.

Community Discussion

No comments yet. Be the first to start the discussion!