Information Security: Principles and Practices 2nd Edition by Jim Breithaupt, Mark S. Merkow

Exercise 2

Which of the following choices is not part of a security policy?

A. definition of overall steps of information security and the importance of security

B. statement of management intent, supporting the goals and principles of information security

C. definition of general and specific responsibilities for information security management

D. description of specific technologies used in the field of information security regulations

Step 1 of 2

Part of security policy

Different technologies are needed for the development of a security policy. These technologies can be mentioned in the documentation. However, there is no need to describe the technologies that would be used in the security policy.

Thus, the correct option is.