Security Policies & Procedures Flashcards
7 cards from real CSI practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Security Policies & Procedures flashcards as text
Which scenario best illustrates a violation of a 'least privilege' policy?
Answer: A janitor is given a master key to all areas of a building
Granting a janitor unlimited master key access violates least privilege because they only need access to specific areas required for their duties.
A whistleblower policy in a security context primarily serves to:
Answer: Allow employees to report policy violations without fear of retaliation
Whistleblower policies protect employees who report misconduct or policy violations, encouraging internal reporting rather than concealment.
Which best describes a 'mandatory vacation' policy as a security control?
Answer: It allows auditing of an employee's activities during their absence to detect fraud
Mandatory vacation forces employees away from their duties temporarily, creating an opportunity to audit their work and detect concealed fraud or policy violations.
An organization's 'bring your own device' (BYOD) policy should address which primary security concern?
Answer: Data leakage and unauthorized access to corporate systems from personal devices
BYOD policies must mitigate risks of corporate data exposure through personal devices that may lack adequate security controls.
A post-incident review process is part of which phase of security policy implementation?
Answer: Continuous improvement and lessons learned
Post-incident reviews identify what worked and what failed, feeding lessons learned back into policy updates as part of continuous improvement.
Which security policy would most directly govern how long surveillance video footage must be retained?
Answer: Data Retention Policy
A data retention policy specifies how long various types of records, including surveillance footage, must be kept before secure disposal.
In a formal policy hierarchy, which document typically provides the highest-level strategic direction?
Answer: Security Policy
Security policies sit at the top of the hierarchy, establishing overarching principles that standards, procedures, and guidelines must support.