Question

A security policy is written as a series of individual statements. Identify three properties of statements in a well-written security policy. For example, each statement is numbered for cross-referencing purposes.

Answer 1

SOLUTION:-

SOLUTION:- Three properties of statements in a well-written security policy, are given below:- (1) Each statement uses the word "shall", it is a part of many standards for writing requirements. We omit "shall" only if the policy statement is somehow optional. In our examples, although, we will not have optional statements. (2) There should be a method to test the implementation to determine if the policy statement is true. When we test our implementation, the policy provides a list of features we must test. (3) Each statement recognize which prioritized risks the statement is intentioned to address.
==========================================================================