A security policy outlines what needs to be done but not ____ to do it.
A) when
B) where
C) how
D) who

Question

Quizplus · Accepted Answer

A security policy is a high-level document that provides guidelines and principles for the organization's security posture. It outlines what needs to be done to ensure the confidentiality, integrity, and availability of organizational assets, but it does not provide details on how to achieve these objectives. The "how" is typically documented in procedures, standards, and guidelines.

A Security Policy Outlines What Needs to Be Done but Not