Certified Chief Information Security Officer (CCISO) — Question 67

Which of the following is MOST likely to be discretionary?

Answer options

• A. Policies
• B. Procedures
• C. Guidelines
• D. Standards

Correct answer: C

Explanation

Guidelines are typically discretionary, allowing for flexibility in their application. In contrast, policies, procedures, and standards are usually more rigid and enforced, making them less likely to be considered discretionary.