Security governance relies on a hierarchy of documents that tell people what is required and how to do it. Security+ expects you to distinguish four types: policies, standards, procedures and guidelines. The differences are about scope, detail and whether the document is mandatory. Getting them right matters in practice, because a well-organized document set lets an organization change technical details without rewriting its high-level commitments, and lets auditors trace every control back to a requirement.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.