ITPEC IP April 2020 Question 41
ITPEC IP April 2020 — Question 41 of 100
Procedures describe the concrete steps that responsible personnel must perform in accordance with security standards. The basic policy states management's overall direction, standards establish mandatory rules, and procedures translate those rules into operational actions.
Answer (c)
Why not others:
- management establishes and endorses the top-level policy rather than delegating it upward from employee procedures
- an incident-response manual is narrower than the basic policy
- standards derive from and support the policy; they do not define what the higher-level policy must say
Key rule: Security documentation typically flows from policy to standards to detailed procedures.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.