Certified Information Privacy Technologist (CIPT) — Question 95

When writing security policies, the most important consideration is to?

Answer options

• A. Require all employees to read and acknowledge their understanding
• B. Ensure they are based on the organization's risk profile
• C. Ensure they cover enough details for common situations
• D. Follow industry best practices

Correct answer: B

Explanation

The correct answer is B because security policies should be tailored to the specific risks faced by the organization to be effective. Options A, C, and D, while important, do not prioritize the alignment of the policies with the organization's unique risk profile, which is crucial for security effectiveness.