CompTIA Security+ Exam Prep

Answer: C - An issue-specific policy addresses specific security issues that management feels need more detailed explanation and attention. The goal is to make sure a comprehensive structure is built and all employees understand how they are to comply with these security issues. The policy provides direction and structure for the staff by indicating what they can and cannot do. It informs the users of the expectations of their actions and it provides liability protection in case an employee cries “foul” for any reason dealing with issue-specific policy.