Which of the following is MOST critical for the successful implementation and maintenance of a security policy?

Which of the following is MOST critical for the successful implementation and maintenance of a security policy?
A . Assimilation of the framework and intent of a written security policy by all appropriate parties
B . Management support and approval for the implementation and maintenance of a security policy
C . Enforcement of security rules by providing punitive actions for any violation of security rules
D . Stringent implementation, monitoring and enforcing of rules by the security officer through access control software

View Answer

Answer: A

Explanation:

Assimilation of the framework and intent of a written security policy by the users of the system is critical to the successful implementation and maintenance of the security policy. A good password system may exist, but if the users of the system keep passwords written on their desk, the password is of little value. Management support and commitment is no doubt important, but for successful implementation and maintenance of security policy, educating the users on the importance of security is paramount. The stringent implementation, monitoring and enforcing of rules by the security officer through access control software, and provision for punitive actions for violation of security rules, is also required, along with the user’s education on the importance of security.