a. What is a policy?

11a.) A policy specifies _______.

a. What should be done

b. How to do it

c. Both A and B

d. Neither A nor B

b. Distinguish between policy and implementation.

11b.) Which of the following specifies what should be done?

a. Policies

b. Implementation

c. Both A and B

d. Neither A nor B

c. Why do companies separate policies from implementation?

11c.) Policies are separated by implementation to take advantage of ________.

a. Implementer knowledge

b. The delegation of work principle

c. Minimum permissions

d. Segregation of duties