Key Terms 6

Question 1

High-level document that outlines senior management’s security directives.

Answer 1

Policy

Question 2

Organizational (master), issue-specific, system-specific.

Answer 2

Policy types

Question 3

Regulatory, advisory, informative.

Answer 3

Policy functionality types

Question 4

Compulsory rules that support the security policies.

Answer 4

Standard

Question 5

Suggestions and best practices.

Answer 5

Guideline

Question 6

Step-by-step implementation instructions

Answer 6

Procedures