Statements ranking information risks and identifying security goals are included in a(n):
A)security policy.
B)AUP.
C)risk assessment.
D)business impact analysis.

Question

Quizplus · Accepted Answer

A security policy typically includes statements ranking information risks and identifying security goals. An Acceptable Use Policy (AUP) outlines acceptable use of organizational resources, but typically does not include specific risk ranking or security goal statements. A risk assessment evaluates potential threats and vulnerabilities, but does not necessarily include specific statements ranking information risks or identifying security goals. A business impact analysis assesses the potential impact of an incident on business operations, but does not necessarily include specific statements ranking information risks or identifying security goals.

Statements Ranking Information Risks and Identifying Security Goals Are Included