Question

17. What is an issue-specific security policy? 

18. List the critical areas covered in an issue-specific security policy. 

19. What is a systems-specific security policy? 

20. When is a systems-specific security policy used?

Answer 1

17. What is an issue-specific security policy?

Solution)
The issue-specific security policy addresses specific areas of technology and contains a statement on the organization position on a specific issue

18. List the critical areas covered in an issue-specific security policy.

Solution)

Critical Areas:

(1) Independent issue-specific security policy documents, each tailored to a specific issue
(2) A Single comprehensive issue-specific security policy document covering all issues.
(3) A modular issues-specific security policty document that unifies policy creation and administration while maintaining each specific issue's requirements

19. What is a systems-specific security policy?

Solution)
Systems-specific security policies are frequently codified as standards and procedures to be used when configuring or maintaining systems
20. When is a systems-specific security policy used?

Solution)
Systems-specific security policy are used when configuring or maintaining systems