Explain the importance of policies to organizational security

Question 1

Personnel

Answer 1

Acceptable use policy
Job rotation
Mandatory vacation
Separation of duties
Least privilege
Clean desk space
Background checks
Non-disclosure agreement (NDA)
Social media analysis
Onboarding
Offboarding
User training

Question 2

Acceptable use policy

Question 3

Job rotation

Question 4

Mandatory vacation

Question 5

Separation of duties

Question 6

Least privilege

Question 7

Clean desk space

Question 8

Clean desk space

Question 9

Background checks

Question 10

Non-disclosure agreement (NDA)

Question 11

Social media analysis

Question 12

Onboarding

Question 13

Offboarding

Question 14

User training

Answer 14

Gamification
Capture the flag
Phishing campaigns

Question 15

Gamification

Question 16

Capture the flag

Question 17

Phishing campaigns

Answer 17

Phishing simulations
Computer-based training (CBT)
Role-based training

Question 18

Phishing simulations

Question 19

Computer-based training (CBT)

Question 20

Role-based training

Question 21

Diversity of training techniques

Question 22

Third-party risk management

Answer 22

Vendors
Supply chain
Business partners
Service level agreement (SLA)
Memorandum of understanding (MOU)
Master services agreement (MSA)
Business partnership agreement (BPA)
End of life (EOL)
End of service life (EOSL)
NDA

Question 23

Vendor

Question 24

Supply chain

Question 25

Business partners

Question 26

Service level agreement (SLA)

Question 27

Memorandum of understanding (MOU)

Question 28

Master services agreement (MSA)

Question 29

Business partnership agreement (BPA)

Question 30

End of life (EOL)

Question 31

End of service life (EOSL)

Question 32

NDA

Question 33

Data

Answer 33

Classification
Governance
Retention

Question 34

Classification

Question 35

Governance

Question 36

Retention

Question 37

Credential policies

Answer 37

Personnel
Third-party
Devices
Service accounts
Administrator/root accounts

Question 38

Personnel

Question 39

Third-party

Question 40

Devices

Question 41

Service accounts

Question 42

Administrator/root accounts

Question 43

Organizational policies

Answer 43

Change management
Change control
Asset management

Question 44

Change management

Question 45

Change control

Question 46

Asset management