Which of the following is NOT among the three types of InfoSec policies based on NIST's Special Publication 800-14?
A) Enterprise information security policy
B) User-specific security policies
C) Issue-specific security policies
D) System-specific security policies

Question

Quizplus · Accepted Answer

NIST's Special Publication 800-14 outlines three types of InfoSec policies: enterprise information security policy, issue-specific security policies, and system-specific security policies. User-specific security policies are not one of the types mentioned.

Which of the Following Is NOT Among the Three Types