Karen and her security team have been tasked with developing a security policy to be presented to senior management for a new start-up organization. Of the factors listed below, which is the most important in determining an effective security policy?

A.
The cost/rate-of-return factor

B.
It is consistent with the mission of the company

C.
It reflects each person on the security team

D.
It concentrates on the assets closest to the CEO’s heart

Explanation:
Above all else, a security policy should be consistent with a company’s overall
mission. A good security policy will protect all critical assets that are vital in
carrying out a specified mission. It is important that the directives that are
outlined in the policy are integrated into business processes.