Which choice below is an accurate statement about standards?

A.
Standards are senior management’s directives to create a computer security program.

B.
Standards are used to describe how policies will be implemented within an organization.

C.
Standards are the high-level statements made by senior management in support of information
systems security.

D.
Standards are the first element created in an effective security policy program.

Explanation:

The other options describe policies. Guidelines, standards, and procedures often accompany policy,
but always follow the senior level management’s statement of policy. Procedures, standards, and
guidelines are used to describe how these policies will be implemented within an organization.
Simply put, the three break down as follows: Standards specify the use of specific technologies in a
uniform way (for example, the standardization of operating procedures). Guidelines are similar to
standards but are recommended actions. Procedures are the detailed steps that must be performed
for any task.