Security policies that require users to create passwords of at least eight characters, including an uppercase letter, a number, and a special character, are examples of controls meant to direct user actions.
The correct answer is that the statement is true. Directive controls include policies and guidelines that direct the actions of users or systems to ensure compliance. In this case, setting requirements for password creation is a form of directive control because it governs how users should create their passwords to meet the organization's security standards.
Learn More
AI Generated Content may display inaccurate information, always double-check anything important.
What are directive controls in security policies?
Why is it important to have strong password policies?
What happens if users do not follow password policies?