Which of the following is a best practice for managing security policies and procedures?

Which of the following is a best practice for managing security policies and procedures?
A . Implementing a regular review process for security policies
B . Relying solely on default security settings
C . Allowing users to create and manage their own security policies
D . Not documenting the security policies and procedures

View Answer

Answer: A

Explanation:

Option 1: Correct: Implementing a regular review process for security policies ensures that they are up-to-date and aligned with the organization’s current security needs.

Option 2: Incorrect: Relying solely on default security settings is not a best practice as default settings may not provide adequate protection and may not be appropriate for the organization’s specific needs.

Option 3: Incorrect: Allowing users to create and manage their own security policies can lead to inconsistencies, lack of control, and potential security vulnerabilities.

Option 4: Incorrect: Not documenting the security policies and procedures makes it difficult to enforce and communicate these policies to employees.