QuestionQ702

Security Concepts and Practices

What is the primary purpose of a Corporate Security Policy?

  • A To transfer the responsibility for the information security to all users of the organization
  • B To communicate management's intentions in regards to information security
  • C To provide detailed steps for performing specific actions
  • D To provide a common framework for all development activities
Explanation

A corporate security policy communicates management’s overall intentions, direction, and commitment regarding information security. Detailed instructions are normally defined in procedures and standards.

Community Discussion

No comments yet. Be the first to start the discussion!