What term defines the set of laws, rules, and practices that regulate how an organization manages, protects, and distributes sensitive information?

What term defines the set of laws, rules, and practices that regulate how an organization manages, protects, and distributes sensitive information?

• A. Security Policy
• B. System Development Life Cycle
• C. Scoping
• D. Secure Wipe

Answer: (A)

Security policy is the formal set of rules and practices that guide how an organization manages, protects, and shares sensitive information. It defines who can access data, what protections must be in place (like encryption and access controls), and how incidents are handled and governed, providing the authority and direction for the entire security program. This policy sits above other controls, shaping training, enforcement, and compliance across the organization. The other terms describe different things: the System Development Life Cycle is about how systems are built and maintained, Scoping determines what parts of the environment are included in assessments, and Secure Wipe refers to methods of permanently erasing data. Thus, the policy best captures the overarching framework for handling sensitive information.

Security policy is the formal set of rules and practices that guide how an organization manages, protects, and shares sensitive information. It defines who can access data, what protections must be in place (like encryption and access controls), and how incidents are handled and governed, providing the authority and direction for the entire security program. This policy sits above other controls, shaping training, enforcement, and compliance across the organization. The other terms describe different things: the System Development Life Cycle is about how systems are built and maintained, Scoping determines what parts of the environment are included in assessments, and Secure Wipe refers to methods of permanently erasing data. Thus, the policy best captures the overarching framework for handling sensitive information.