CompTIA Security+ Exam Prep

Answer: B - Organizational security policies establish how a security program will be set up. It will lay out the program’s goals, assign responsibility, show the strategic and tactical value of security, and outline how enforcement should be carried out. A process for dealing with those that choose not to comply with the security policies must be developed and enforced so there is a structured method of response to noncompliance. This establishes a process that others can understand and thus recognize not only what is expected of them, but also that they can expect as a response to their noncompliance.