An information security policy provides rules for the protection of the information assets of the organization.

Question

Quizplus · Accepted Answer

An information security policy is a formal document that outlines an organization's rules, guidelines, and responsibilities to protect its information assets from unauthorized access, use, disclosure, modification or destruction. It provides a framework to prevent, detect, and respond to security incidents. Thus, the given statement is true.

An Information Security Policy Provides Rules for the Protection of the Information