Certified Cloud Security Professional (CCSP) — Question 422

Every security program and process should have which of the following?

Answer options

• A. Severe penalties
• B. Multifactor authentication
• C. Foundational policy
• D. Homomorphic encryption

Correct answer: C

Explanation

A foundational policy is essential as it establishes the framework and guidelines for the security program. While severe penalties, multifactor authentication, and homomorphic encryption are important components of security, they are not foundational elements that every security program must have.