An organization publishes an acceptable-use policy that outlines how employees may access and utilize company resources. Which type of security control does this policy represent?
Written policies that outline permitted or required behavior are directive controls because they provide explicit guidance to users and systems. Detective controls identify incidents, preventive controls block them from occurring, and compensating controls provide alternatives when primary controls are not feasible. Therefore, the acceptable-use policy exemplifies a directive control.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a directive control in the context of security policies?
Open an interactive chat with Bash
How do directive controls differ from preventive controls?
Open an interactive chat with Bash
Why are acceptable-use policies important for organizational security?