Which choice below is an accurate statement about standards?

A.
Standards are senior management’s directives to create a computer
security program.

B.
Standards are used to describe how policies will be implemented
within an organization.

C.
Standards are the high-level statements made by senior management
in support of information systems security.

D.
Standards are the first element created in an effective security policy
program.

Explanation:
The other options describe policies. Guidelines, standards, and
procedures often accompany policy, but always follow the senior level
management’s statement of policy. Procedures, standards, and guidelines
are used to describe how these policies will be implemented
within an organization. Simply put, the three break down as follows:
Standards specify the use of specific technologies in a uniform
way (for example, the standardization of operating procedures).
Guidelines are similar to standards but are recommended actions.
Procedures are the detailed steps that must be performed for any
task.