Which item is NOT listed as a policy type in the given material?

Which item is NOT listed as a policy type in the given material?

• A. Data Policy
• B. Security Policy
• C. Internet Usage Policy
• D. Incident Response Policy

Answer: (D)

Policy types in governance documents typically cover areas like how data is handled, the overall security posture, and rules for using networks and systems. The item that isn’t listed as a policy type in the material is the one that governs how security incidents are detected, reported, and managed. That incident response area is usually treated as a plan or set of procedures within the organization’s security operations, rather than a standalone policy type. So, while data policy, security policy, and internet usage policy define rules and standards, incident response is about actions to take after an incident and managing the incident lifecycle, which is why it isn’t listed as a policy type.

Policy types in governance documents typically cover areas like how data is handled, the overall security posture, and rules for using networks and systems. The item that isn’t listed as a policy type in the material is the one that governs how security incidents are detected, reported, and managed. That incident response area is usually treated as a plan or set of procedures within the organization’s security operations, rather than a standalone policy type. So, while data policy, security policy, and internet usage policy define rules and standards, incident response is about actions to take after an incident and managing the incident lifecycle, which is why it isn’t listed as a policy type.