Question

Which of the following is not a likely reason that specific password requirements, such as length, the use of special characters and the like, are usually guidelines in an organization rather than policies?A) The specific password requirements can be changed more easily as needed if they are guidelines rather than policies.
B) Password guidelines are usually created and maintained by the IT department, which is in a better position to know best practices in password security.
C) Policies are created at a higher level in the "chain of command" and as such cannot be changed quickly in response to a particular security need.
D) Policies are not typically concerned with broad topics such as IT security and passwords.

Answer 1

Answer:

D) Policies are not typically concerned with broad topics such as IT security and passwords.

Explanation:

A company's policies may concern a lot of issues, ranging from very broad and general issues to more specific issues, e.g. like corporate governance, employee conduct, compensation policies, organizational structure, equal opportunity policies, substance abuse, etc., and of course they can include topics like IT security and passwords.