(8) Standards And Procedures

Question 1

What are technology standards within a corporate environment?

Answer 1

Standards are mandatory requirements describing how an organization will carry out its information security policies

Question 2

What are the three things that policies, standards, and guidelines set out to do

Answer 2

Policies set out high level objectives of the security program and requires adherence with standards (which lay out required security controls).

Guidelines give advice to orgs that are trying to comply with policies and standards

Question 3

We know what procedures are, but what do they do?

Answer 3

Procedures make sure that consistent processes are followed to help meet a security objective

Question 4

What are monitoring procedures?

Answer 4

Monitoring procedures lay out how the org will conduct security monitoring, including the use of monitoring technology

Question 5

What are evidence production procedures?

Answer 5

Evidence production procedures lay out how the org will respond to legal summons to provide digital evidence

Question 6

What are patching procedures?

Answer 6

Patching procedures are such that describe how often the process of applying patches to apps and systems occur