Question about Policy, Procedure & Process...

19 views
Skip to first unread message

VT

unread,
Jul 29, 2018, 6:52:58 PM7/29/18
to CISSP Study Mailing List
What aspect of an organizational security policy, procedure, or process affects all other aspects?

A. Awareness training

B. Logical security

C. Disaster recovery

D. Physical security

Its a good tricky question, but I guess the answer might not be acceptable. But you guys can try & answer and let me know if you have any explanation. May need Clement's input as well. 

Anil Kumar K

unread,
Jul 29, 2018, 9:13:39 PM7/29/18
to cissp...@googlegroups.com
Physical security.

From: cissp...@googlegroups.com <cissp...@googlegroups.com> on behalf of VT <mgr...@gmail.com>
Sent: Monday, July 30, 2018 4:22:58 AM
To: CISSP Study Mailing List
Subject: [CCCure_CISSP_Talks] Question about Policy, Procedure & Process...
 
--
===========================================================
Another resource brought to you by CCCure for our Learners
 
Having any issues, contact us at: sup...@cccure.com
 
Visit our NEW quiz at: https://cccure.education/
 
Visit our learning portal at: https://cccure.training
 
Visit the CCCure web store at: https://www.cccure.com
===========================================================
---
You received this message because you are subscribed to the Google Groups "CISSP Study Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cissptalks+...@googlegroups.com.
To post to this group, send email to cissp...@googlegroups.com.
Visit this group at https://groups.google.com/group/cissptalks.
To view this discussion on the web visit https://groups.google.com/d/msgid/cissptalks/19e41b1f-ad64-4f47-a2bb-5d5e29eae558%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Venky T

unread,
Jul 31, 2018, 1:26:58 AM7/31/18
to cissp...@googlegroups.com
Thanks for your reply. Can you pls explain how you narrowed down to that answer ?

-- V.T.


To view this discussion on the web visit https://groups.google.com/d/msgid/cissptalks/CY4PR03MB242128B3472D5A71BCE4609BAB2F0%40CY4PR03MB2421.namprd03.prod.outlook.com.

Anil Kumar K

unread,
Jul 31, 2018, 1:38:59 AM7/31/18
to cissp...@googlegroups.com
physical security is first. If this is affected all others will have impact.

Like having a gold/diamonds in a house n not having doors/walls.

From: cissp...@googlegroups.com <cissp...@googlegroups.com> on behalf of Venky T <mgr...@gmail.com>
Sent: Tuesday, July 31, 2018 10:56:46 AM
To: cissp...@googlegroups.com
Subject: Re: [CCCure_CISSP_Talks] Question about Policy, Procedure & Process...
 

Venky T

unread,
Aug 2, 2018, 9:04:18 PM8/2/18
to cissp...@googlegroups.com
Thanks for your explanation Anil.

V.T



To view this discussion on the web visit https://groups.google.com/d/msgid/cissptalks/CY4PR03MB2421705B068D8DC369D7A13CAB2E0%40CY4PR03MB2421.namprd03.prod.outlook.com.

Anil Kumar K

unread,
Aug 2, 2018, 10:44:55 PM8/2/18
to cissp...@googlegroups.com
And I hope answer is correct?

Sent: Friday, August 3, 2018 6:34:06 AM

Venky T

unread,
Aug 3, 2018, 3:44:18 PM8/3/18
to cissp...@googlegroups.com
I am still not convinced about the choice, because the question says - What aspect of an organizational security policy, procedure, or process affects all other aspects?

This is what I can guess, when users are given training / awareness training that will assist them to follow proper Security Policy, Procedures & process which will affect all other areas in an enterprise security...

Anyone else has any comments, May be Clement, can you provide some insight pls ?


-- Venky.T.


To view this discussion on the web visit https://groups.google.com/d/msgid/cissptalks/DM5PR03MB24257863A639781CF9496F32AB230%40DM5PR03MB2425.namprd03.prod.outlook.com.

Rajan Gauchan

unread,
Aug 3, 2018, 5:07:10 PM8/3/18
to cissp...@googlegroups.com
I go for A. Awareness training
coz it covers all aspects in any organization. If an organization decides to go for awareness training, it will be more broader considering physical, technical and administrative controls rather than single security control.  Moreover awareness is administrative type of control and in the question we have keywords like policy, procedure or process which is more often used in managerial level.
Also Awareness training can cover all other choices mentioned in the question.
My reasoning only!

To unsubscribe from this group and stop receiving emails from it, send an email to cissptalks+unsubscribe@googlegroups.com.

--
===========================================================
Another resource brought to you by CCCure for our Learners
 
Having any issues, contact us at: sup...@cccure.com
 
Visit our NEW quiz at: https://cccure.education/
 
Visit our learning portal at: https://cccure.training
 
Visit the CCCure web store at: https://www.cccure.com
===========================================================
---
You received this message because you are subscribed to the Google Groups "CISSP Study Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cissptalks+unsubscribe@googlegroups.com.

--
===========================================================
Another resource brought to you by CCCure for our Learners
 
Having any issues, contact us at: sup...@cccure.com
 
Visit our NEW quiz at: https://cccure.education/
 
Visit our learning portal at: https://cccure.training
 
Visit the CCCure web store at: https://www.cccure.com
===========================================================
---
You received this message because you are subscribed to the Google Groups "CISSP Study Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cissptalks+unsubscribe@googlegroups.com.

--
===========================================================
Another resource brought to you by CCCure for our Learners
 
Having any issues, contact us at: sup...@cccure.com
 
Visit our NEW quiz at: https://cccure.education/
 
Visit our learning portal at: https://cccure.training
 
Visit the CCCure web store at: https://www.cccure.com
===========================================================
---
You received this message because you are subscribed to the Google Groups "CISSP Study Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cissptalks+unsubscribe@googlegroups.com.

--
===========================================================
Another resource brought to you by CCCure for our Learners
 
Having any issues, contact us at: sup...@cccure.com
 
Visit our NEW quiz at: https://cccure.education/
 
Visit our learning portal at: https://cccure.training
 
Visit the CCCure web store at: https://www.cccure.com
===========================================================
---
You received this message because you are subscribed to the Google Groups "CISSP Study Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cissptalks+unsubscribe@googlegroups.com.

--
===========================================================
Another resource brought to you by CCCure for our Learners
 
Having any issues, contact us at: sup...@cccure.com
 
Visit our NEW quiz at: https://cccure.education/
 
Visit our learning portal at: https://cccure.training
 
Visit the CCCure web store at: https://www.cccure.com
===========================================================
---
You received this message because you are subscribed to the Google Groups "CISSP Study Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cissptalks+unsubscribe@googlegroups.com.

--
===========================================================
Another resource brought to you by CCCure for our Learners
 
Having any issues, contact us at: sup...@cccure.com
 
Visit our NEW quiz at: https://cccure.education/
 
Visit our learning portal at: https://cccure.training
 
Visit the CCCure web store at: https://www.cccure.com
===========================================================
---
You received this message because you are subscribed to the Google Groups "CISSP Study Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cissptalks+unsubscribe@googlegroups.com.

To post to this group, send email to cissp...@googlegroups.com.
Visit this group at https://groups.google.com/group/cissptalks.
To view this discussion on the web visit https://groups.google.com/d/msgid/cissptalks/CAHHe5Jtxfqd%3DjnHNDkx2Dm71vdZ8JZatdWySm%2B1JGG0wV55%3D6w%40mail.gmail.com.

For more options, visit https://groups.google.com/d/optout.



--
Rajan Gauchan



Anil Kumar K

unread,
Aug 3, 2018, 11:51:35 PM8/3/18
to cissp...@googlegroups.com
Just to remember humans are always last line of defence.

From: cissp...@googlegroups.com <cissp...@googlegroups.com> on behalf of Rajan Gauchan <rajanga...@gmail.com>
Sent: Saturday, August 4, 2018 2:36:35 AM
To unsubscribe from this group and stop receiving emails from it, send an email to cissptalks+...@googlegroups.com.

To post to this group, send email to cissp...@googlegroups.com.
Visit this group at https://groups.google.com/group/cissptalks.

Venky T

unread,
Aug 4, 2018, 3:46:27 PM8/4/18
to cissp...@googlegroups.com
I appreciate your comment & thats right, but they can all be covered in Awareness training. Without the training, it will not be known to anyone to take appropriate countermeasures.

-- V.T.


To unsubscribe from this group and stop receiving emails from it, send an email to cissptalks+...@googlegroups.com.
To post to this group, send email to cissp...@googlegroups.com.
Visit this group at https://groups.google.com/group/cissptalks.

--
===========================================================
Another resource brought to you by CCCure for our Learners
 
Having any issues, contact us at: sup...@cccure.com
 
Visit our NEW quiz at: https://cccure.education/
 
Visit our learning portal at: https://cccure.training
 
Visit the CCCure web store at: https://www.cccure.com
===========================================================
---
You received this message because you are subscribed to the Google Groups "CISSP Study Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cissptalks+...@googlegroups.com.
To post to this group, send email to cissp...@googlegroups.com.
Visit this group at https://groups.google.com/group/cissptalks.

--
===========================================================
Another resource brought to you by CCCure for our Learners
 
Having any issues, contact us at: sup...@cccure.com
 
Visit our NEW quiz at: https://cccure.education/
 
Visit our learning portal at: https://cccure.training
 
Visit the CCCure web store at: https://www.cccure.com
===========================================================
---
You received this message because you are subscribed to the Google Groups "CISSP Study Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cissptalks+...@googlegroups.com.
To post to this group, send email to cissp...@googlegroups.com.
Visit this group at https://groups.google.com/group/cissptalks.

--
===========================================================
Another resource brought to you by CCCure for our Learners
 
Having any issues, contact us at: sup...@cccure.com
 
Visit our NEW quiz at: https://cccure.education/
 
Visit our learning portal at: https://cccure.training
 
Visit the CCCure web store at: https://www.cccure.com
===========================================================
---
You received this message because you are subscribed to the Google Groups "CISSP Study Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cissptalks+...@googlegroups.com.
To post to this group, send email to cissp...@googlegroups.com.
Visit this group at https://groups.google.com/group/cissptalks.

--
===========================================================
Another resource brought to you by CCCure for our Learners
 
Having any issues, contact us at: sup...@cccure.com
 
Visit our NEW quiz at: https://cccure.education/
 
Visit our learning portal at: https://cccure.training
 
Visit the CCCure web store at: https://www.cccure.com
===========================================================
---
You received this message because you are subscribed to the Google Groups "CISSP Study Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cissptalks+...@googlegroups.com.
To post to this group, send email to cissp...@googlegroups.com.
Visit this group at https://groups.google.com/group/cissptalks.

--
===========================================================
Another resource brought to you by CCCure for our Learners
 
Having any issues, contact us at: sup...@cccure.com
 
Visit our NEW quiz at: https://cccure.education/
 
Visit our learning portal at: https://cccure.training
 
Visit the CCCure web store at: https://www.cccure.com
===========================================================
---
You received this message because you are subscribed to the Google Groups "CISSP Study Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cissptalks+...@googlegroups.com.
To post to this group, send email to cissp...@googlegroups.com.
Visit this group at https://groups.google.com/group/cissptalks.

--
===========================================================
Another resource brought to you by CCCure for our Learners
 
Having any issues, contact us at: sup...@cccure.com
 
Visit our NEW quiz at: https://cccure.education/
 
Visit our learning portal at: https://cccure.training
 
Visit the CCCure web store at: https://www.cccure.com
===========================================================
---
You received this message because you are subscribed to the Google Groups "CISSP Study Mailing List" group.



--
Rajan Gauchan



To view this discussion on the web visit https://groups.google.com/d/msgid/cissptalks/CY4PR03MB24219C3E32A9193862B40139AB220%40CY4PR03MB2421.namprd03.prod.outlook.com.
Reply all
Reply to author
Forward
0 new messages