CSI Security Policies & Procedures 3

Question 1

During a security investigation, an investigator discovers a policy violation but no criminal act. The most appropriate action is to:

Accepted Answer

Document findings and refer to HR or management per organizational procedures

Answer

Policy violations are handled through organizational disciplinary processes, typically involving HR, not unilateral investigator action.

Question 2

A 'need-to-know' principle in security policy means access to information is granted based on:

Accepted Answer

Both job function requirements AND appropriate clearance level

Answer

Need-to-know requires that both a valid job requirement AND proper authorization/clearance exist before granting information access.

Question 3

Which policy governs how an organization responds when a security breach is discovered?

Accepted Answer

Incident Response Policy

Answer

An Incident Response Policy defines roles, procedures, and timelines for detecting, containing, and recovering from security incidents.

Question 4

Policy review cycles are important because:

Accepted Answer

Threat landscapes, regulations, and business operations change over time

Answer

Regular reviews ensure policies remain relevant as threats evolve, regulations change, and organizational processes shift.

Question 5

A visitor management policy most directly supports which security principle?

Accepted Answer

Physical access control and accountability

Answer

Visitor management policies control and document who enters facilities, supporting physical access control and creating an accountability record.

(CSI) Certified Security Investigator Practice Test