Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
I vote A. Keywords being "preferred practices", meaning "not mandatory, operational-level stuff". All other answers would require policies being implemented.
A. Explain the organization's preferred practices for security. While the other options (B, C, and D) may be important aspects of information security management, the primary purpose of documenting information security guidelines is to provide clear guidance on how the organization prefers to handle security-related matters. This helps ensure that employees and stakeholders understand the organization's expectations and can follow best practices for security.
Guidelines are not mandatory! In order to communicate goals, objectives or prescriptions you need policies, standards, baselines…