Which policy category includes examples such as application policy and network policy, and related policies for auditors or backups?

Which policy category includes examples such as application policy and network policy, and related policies for auditors or backups?

• A. Issue Specific Security Policy (ISSP)
• B. Enterprise Information Security Policy (EISP)
• C. Safeguard Security Requirements
• D. Procedural Security Requirements

Answer: (A)

Issue Specific Security Policy focuses on domain-specific policies within an organization’s security program. It covers rules and controls for particular areas, such as how applications should be used and secured (application policy) or how the network should be managed (network policy). It also includes policies that govern specialized activities, like auditing practices or backup procedures. This targeted focus is what makes it the best fit for examples like application policy, network policy, and related policies for auditors or backups. In contrast, the Enterprise Information Security Policy provides overarching guidance for the entire program, while the other terms refer to safeguards or procedural requirements rather than the category of domain-specific policies.

Issue Specific Security Policy focuses on domain-specific policies within an organization’s security program. It covers rules and controls for particular areas, such as how applications should be used and secured (application policy) or how the network should be managed (network policy). It also includes policies that govern specialized activities, like auditing practices or backup procedures. This targeted focus is what makes it the best fit for examples like application policy, network policy, and related policies for auditors or backups. In contrast, the Enterprise Information Security Policy provides overarching guidance for the entire program, while the other terms refer to safeguards or procedural requirements rather than the category of domain-specific policies.