How does a security policy guide employees?

• A. By providing them with comfort in their roles
• B. By outlining security practices they should follow
• C. By detailing software features
• D. By mandating strict working hours

Answer: (B)

A security policy serves as a foundational document that outlines the specific security practices and procedures that employees are expected to follow within an organization. It provides a clear framework for understanding the guidelines and protocols that are critical for maintaining the security of information assets.

By outlining security practices, the policy communicates expectations regarding how employees should handle sensitive data, respond to security incidents, and utilize company resources securely. This guidance helps employees recognize their responsibilities in protecting the organization's information and technology assets, thus reducing the likelihood of security breaches that might occur due to negligence or misunderstanding.

In providing these detailed practices, a security policy also supports a culture of security awareness, ensuring employees are informed and proactive in managing security risks. Hence, it is essential for guiding behavior and decision-making related to security matters in the workplace.