(ISC)2 Certified in Cybersecurity Practice Exam

In security management, which term refers to techniques that actualize security measures?

1. Policies

2. Standards

3. Frameworks

4. Procedures

The correct answer is: Procedures

The term that refers to techniques that actualize security measures is procedures. Procedures are the specific, detailed steps that outline how to implement security policies and controls in practice. They serve as a practical guide for personnel to follow when performing tasks related to security, ensuring that security measures are not only defined but also executed effectively. For instance, an organization might have a policy stating that all sensitive data must be encrypted. The corresponding procedure would detail how to encrypt the data, which tools to use, and the steps to follow to ensure compliance with the policy. This distinction is crucial because while policies provide a high-level overview and guidelines, procedures give explicit instructions, making them essential for operationalizing security measures and achieving the desired level of security within an organization. In contrast, policies establish rules and expectations, standards define specific metrics that must be met, and frameworks provide a structured approach for organizing security efforts but do not necessarily dive into the detailed implementation techniques.