In which one of the following documents is the assignment of individual roles and responsibilities
MOST appropriately defined?

A.
Security policy

B.
Enforcement guidelines

C.
Acceptable use policy

D.
Program manual

Explanation:
An acceptable use policy is a document that the employee signs in which the expectations, roles and
responsibilities are outlined.
Issue -specific policies address specific security issues that management feels need more detailed
explanation and attention to make sure a comprehensive structure is built and all employees
understand how they are to comply to these security issues. – Shon Harris All-in-one CISSP
Certification Guide pg 62