Which category of actions & controls in the IACM includes formal statements and rules about organizational intentions and expectations?

Which category of actions & controls in the IACM includes formal statements and rules about organizational intentions and expectations?
A . Information
B . People
C . Technology
D . Policy

View Answer

Answer: D

Explanation:

The Policy category in the IACM encompasses formal statements, rules, and guidelines that articulate the organization’s intentions and expectations.

Role of Policies:

Set boundaries and guidelines for behavior and decision-making. Ensure consistency in actions and alignment with organizational goals. Examples:

Code of conduct.

Data privacy and security policies.

Why Other Options Are Incorrect:

A: Information deals with data and communication, not formal statements.

B: People refer to human elements like roles and responsibilities.

C: Technology focuses on tools and systems.

Reference: OCEG IACM Framework: Highlights the role of policies in formalizing organizational expectations.