Which of the following is not one of the common policy areas generally included in an information security policy?
A) Access Control Policies (e.g., password controls)
B) External Access Policies (e.g., accessing the Web and Internet)
C) Usage of Social Security Number Policies. (e.g., whether it is an identifier)
D) Acceptable Use Policies (e.g., usage of organization's computer resources)

Question

Quizplus · Accepted Answer

While the usage of social security numbers is certainly a important security consideration, it is not typically included as a distinct policy area within an information security policy. Access control, external access, and acceptable use are all commonly addressed in these policies.

Which of the Following Is Not One of the Common