The MOST important characteristic of good security policies is that they:
A . state expectations of IT management.
B . state only one general security mandate.
C . are aligned with organizational goals.
D . govern the creation of procedures and guidelines.
Answer: C
Explanation:
The most important characteristic of good security policies is that they be aligned with organizational goals. Failure to align policies and goals significantly reduces the value provided by the policies. Stating expectations of IT management omits addressing overall organizational goals and objectives. Stating only one general security mandate is the next best option since policies should be clear; otherwise, policies may be confusing and difficult to understand. Governing the creation of procedures and guidelines is most relevant to information security standards.