Governance decisions only take effect when they are written down in a form people can follow. Security programs use a hierarchy of documents, and the CC exam frequently asks you to identify which kind of document a statement belongs to. The key is to look at how specific it is and whether it is mandatory.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 6 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.