Question 87
Main Page
A CISO is writing a policy for encryption key management. What type of policy is this?
A. Business continuity policy
B. Asset classification policy
C. Cryptographic policy
D. Remote access policy
Answer: C. Cryptographic policy
Encryption and key management fall under cryptographic policies, defining acceptable algorithms, key lengths, and lifecycles.