Which term defines the standards of behavior for activities and dictates how to conduct cybersecurity within an organization?

Which term defines the standards of behavior for activities and dictates how to conduct cybersecurity within an organization?

• A. Compliance
• B. Policy
• C. HITECH
• D. SSL/TLS

Answer: (B)

Policy defines the standards of behavior and how cybersecurity should be conducted across an organization. It’s a formal statement from leadership that sets acceptable use, responsibilities, data handling, access controls, incident response, and overall security posture. This governance document provides the framework for all security activities and decisions, guiding procedures, controls, and enforcement. Compliance, by contrast, is about meeting external rules and regulations; HITECH is a specific health IT regulation; SSL/TLS are encryption protocols used to protect data in transit.

Policy defines the standards of behavior and how cybersecurity should be conducted across an organization. It’s a formal statement from leadership that sets acceptable use, responsibilities, data handling, access controls, incident response, and overall security posture. This governance document provides the framework for all security activities and decisions, guiding procedures, controls, and enforcement.

Compliance, by contrast, is about meeting external rules and regulations; HITECH is a specific health IT regulation; SSL/TLS are encryption protocols used to protect data in transit.