To verify that daily review procedures exist, which documents should you examine?

To verify that daily review procedures exist, which documents should you examine?

• A. Human resources policies.
• B. Security policies and procedures.
• C. Marketing guidelines.
• D. Financial controls.

Answer: (B)

Daily review procedures are part of how an organization governs and sustains its security operations. To verify that these procedures exist, you look for formal directives that define what needs to be reviewed each day, who is responsible, how often the reviews are performed, and what evidence must be produced or retained. Those concrete instructions live in security policies and procedures. They establish the routine, the steps to take, and the documentation that proves the reviews happened (for example, signed logs or automated report exports). Other documents aren’t focused on security monitoring. Human resources policies cover people-related processes, marketing guidelines cover branding and campaigns, and financial controls address financial processes and internal controls that are not about daily security reviews. So they wouldn’t reliably verify that daily security reviews exist.

Daily review procedures are part of how an organization governs and sustains its security operations. To verify that these procedures exist, you look for formal directives that define what needs to be reviewed each day, who is responsible, how often the reviews are performed, and what evidence must be produced or retained. Those concrete instructions live in security policies and procedures. They establish the routine, the steps to take, and the documentation that proves the reviews happened (for example, signed logs or automated report exports).

Other documents aren’t focused on security monitoring. Human resources policies cover people-related processes, marketing guidelines cover branding and campaigns, and financial controls address financial processes and internal controls that are not about daily security reviews. So they wouldn’t reliably verify that daily security reviews exist.