Question 1
All of the following are basic components of a security policy EXCEPT the
definition of the issue and statement of relevant terms.
statement of roles and responsibilities
statement of applicability and compliance requirements.
statement of performance of characteristics and requirements.
Correct answer: D
Explanation:
Policies are considered the first and highest level of documentation, from which the lower level elements of standards, procedures, and guidelines flow. This order, however, does not mean that policies are more important than the lower elements. These higherlevel policies, which are the more general policies and statements, should be created first in the process for strategic reasons, and then the more tactical elements can follow. - Ronald Krutz The CISSP PREP Guide (gold edition) pg 13
Policies are considered the first and highest level of documentation, from which the lower level elements of standards, procedures, and guidelines flow. This order, however, does not mean that policies are more important than the lower elements. These higherlevel policies, which are the more general policies and statements, should be created first in the process for strategic reasons, and then the more tactical elements can follow. - Ronald Krutz The CISSP PREP Guide (gold edition) pg 13