Information Security: Principles and Practices 2nd Edition by Jim Breithaupt, Mark S. Merkow

Exercise 11

What is the difference between advisory and regulatory security policies?

A. There is no difference between them.

B. Regulatory policies are high-level policy, whereas advisory policies are very detailed.

C. Advisory policies provide recommendations.

D. Advisory policies are mandated, whereas regulatory policies are not.

Step 1 of 2

Advisory Policies

Advisory policies provide detailed information which can be used to form a standard, whereas regulatory policies keep a check that policies are enforced successfully, failure of which involves certain strict procedures to be followed.

Thus, the correct option is.