CompTIA Security+ Study Guide, 8th Edition

Chapter 16Security Policies, Standards, and Compliance

THE COMPTIA SECURITY+ EXAM OBJECTIVES COVERED IN THIS CHAPTER INCLUDE:

• Domain 5.0: Governance, Risk, and Compliance
  • 5.2. Explain the importance of applicable regulations, standards, or frameworks that impact organizational security posture
  • 5.3. Explain the importance of policies to organizational security

Policy serves as the foundation for any cybersecurity program, setting out the principles and rules that guide the execution of security efforts throughout the enterprise. Often, organizations base these policies on best practice frameworks developed by industry groups such as the National Institute of Standards and Technology (NIST) or the International Organization for ...