Which of the following is MOST critical for the successful implementation and maintenance of a security policy?

A.
Assimilation of the framework and intent of a written security policy by all appropriate parties

B.
Management support and approval for the implementation and maintenance of a security policy

C.
Enforcement of security rules by providing punitive actions for any violation of security rules

D.
Stringent implementation, monitoring and enforcing of rules by the security officer through access control
software

Explanation:
Assimilation of the framework and intent of a written security policy by the users of the system is critical to the
successful implementation and maintenance of the security policy. A good password system may exist, but if
the users of the system keep passwords written on their desk, the password is of little value. Management
support and commitment is no doubt important, but for successful implementation and maintenance of security
policy, educating the users on the importance of security is paramount. The stringent implementation,
monitoring and enforcing of rules by the security officer through access control software, and provision for
punitive actions for violation of security rules, is also required, along with the user’s education onthe importance
of security.