Policies and Procedures

Question 1

What is the difference between policies and procedures?

Answer 1

Policies are more generic
Procedures are specific

Exam Tip: Be able to differentiate Policies and Procedures from one another.

Question 2

What provides a comprehensive security management framework?

Answer 2

Governance

Question 3

What defines the role of security for an organization and establishes the desired state of the security program?

Answer 3

Policies

Note: Policies may be regulatory, advisory, or informative

Question 4

What is a documented reference point in order to use as a method for comparison in the future?

Answer 4

Baseline

Question 5

What is a step-by-step instruction to ensure personnel can perform a given action?

Answer 5

Procedure