A security policy is an overall general statement produced by senior management that dictates
what role security plays within the organization. What are the different types of policies? Each
correct answer represents a complete solution. Choose all that apply.

A.
Advisory

B.
Systematic

C.
Informative

D.
Regulatory

Explanation:
Following are the different types of policies: Regulatory: This type of policy ensures
that the organization is following standards set by specific industry regulations. This policy type is

very detailed and specific to a type of industry. This is used in financial institutions, health care
facilities, public utilities, and other government-regulated industries, e.g., TRAI. Advisory: This type
of policy strongly advises employees regarding which types of behaviors and activities should and
should not take place within the organization. It also outlines possible ramifications if employees
do not comply with the established behaviors and activities. This policy type can be used, for
example, to describe how to handle medical information, handle financial transactions, or process
confidential information. Informative: This type of policy informs employees of certain topics. It is
not an enforceable policy, but rather one to teach individuals about specific issues relevant to the
company. It could explain how the company interacts with partners, the company’s goals and
type of policy exists.