ITC: 2.9.2 Documentation Types Facts

What are policies?

• Directions that outline step-by-step information on how something should be done

• Rules that have been set by an organization

• Detailed instructions for performing a complex or multi-faceted business activity

• Documents that provide information about an organization’s network security

What are procedures?

• Directions that outline step-by-step information on how something should be done

• Rules that have been set by an organization

• Detailed instructions for performing a complex or multi-faceted business activity

• Documents that provide information about an organization’s network security

What does an SOP include?

• Purpose and scope of the process

• The directions or steps needed to complete the process

• Required equipment, technologies, and supplies

• All of the above

Why should end-users and PC technicians be familiar with policies and procedures?

• Because IT systems impact all parts of an organization

• Because it is required by city, state, and industry regulations

• Because it helps in maintaining compliance

• All of the above

What does a password policy specify?

• Accounts should be disabled or locked out after a certain number of failed login attempts

• Users should be required to change their passwords within a certain time frame

• Users may not reuse old passwords

• All of the above

What does a BYOD policy include?

• How and when users can use their devices

• The types of devices that are permitted

• Information about any monitoring that the device may be subject to

• All of the above

What does a backup policy include?

• The types of backups to be completed

• Who is permitted to access restricted areas where backups are stored

• How access is provided (key, key fob, or smart card)

• All of the above

What does a physical security policy indicate?

• Restricted areas within an organization

• How access is provided (key, key fob, or smart card)

• How access is logged and monitored

• All of the above

What does an acceptable use policy define?

• An employee's rights to use company property

• Restrictions on personal use of internet, email, and storage

• Which browsers, applications, and hardware platforms are supported

• All of the above

What is the purpose of a user education and awareness policy?

• To familiarize employees with the organization’s security policy

• To provide contact information

• To identify general IT support available

• All of the above