ITPEC Textbook
Reading settings
Theme

Guest settings stay on this device. Sign in to sync reader settings.

Contents
Chapter 6 · SecurityPractice
← Return to textbook

CONCEPT PRACTICE

Policy and unified decision criteria

1 related verified questions. Take them one at a time.

Filter questions
Question sources

1 of 1 questions match.

Textbook Exercises
0/1 answered

Question 1 of 1

0/1 answered

Volume 1 · Chapter 6 · Textbook Exercises · Q11

Original textbook exercise · Select the image to enlarge
Read the question as text

Which of the following is an appropriate description of information security policy?

The original image above preserves the complete textbook wording and layout.

Choose your answer
Choose an option to check your answer.
1 / 1Back to lesson →

Source: FE Vol 1.pdf, PDF page 409, textbook p. 399 · Information-technology Promotion Agency, Japan · First Edition: April, 2015. ID: tb-v1-c6-q11. Publisher answer and commentary · private review.

Original question · Q11
Q11 Which of the following is an appropriate description of information security policy? a) A company’s security policy is for the purpose of defining the content that should be set within each security system, and therefore, its content differs according to the security-related product to be installed. b) A company’s security policy consists of behavior and judgment criteria to be followed, and does not include stance and direction concerning the security activities. c) A company’s top management should externally disclose information system vulnerabilities that are factors behind the development of a security policy. d) In order to achieve the targeted security level, it is necessary to clearly indicate the organization’s thinking concerning behavior and judgment to be followed.

Scroll horizontally to read the image at full size.

Figure

Open original ↗