Free ISC2 CC Certified in Cybersecurity Actual Exam Questions - Question 9 Discussion

C/D? Procedures make the most sense since they’re all about the step-by-step process. Regulations (D) usually mean laws or rules from outside the organization, not the internal “how-to.” Standards (A) are more about benchmarks or quality levels, and policies (B) just give the overall guidelines or principles. So, procedures fit best for detailed task steps supporting policies.

C imo. Procedures are the only ones that get into the nitty-gritty of how to do stuff, not just what or why. Policies set the direction, standards set criteria, and regulations cover legal or compliance stuff. So for detailed task steps, procedures are the clear choice.

C Procedures are definitely where you find the step-by-step instructions. Regulations (D) tend to be about compliance with laws or external requirements, so they’re less about internal task details. Procedures break down the exact actions people need to take, which fits the question perfectly.

It’s C for sure. Procedures are made to guide exactly how things get done, unlike regulations which are external rules. Policies and standards set the tone but don’t spell out each step.

Makes sense to rule out A and B since standards and policies are more about guidelines or principles, not step-by-step actions. The question asks for detailed steps, so C fits better than D here. Regulations usually come from external bodies and might set rules, but they don’t usually describe how you carry out daily tasks inside a department. So I’d go with C too.

Option C makes the most sense since procedures are all about the exact steps you follow, unlike policies which are more high-level guidelines. Procedures break down the task details clearly.

It’s C because procedures specifically break down the how-to steps, while standards and policies are broader and don’t usually get into that much detail.

Option C seems right since procedures are all about the exact steps to follow, unlike policies or standards which are more general guidelines or quality measures.

C Procedures are the go-to because standards set the quality level, and policies are more about the rules, not the exact task steps. Procedures detail how to actually get things done.

D imo, regulations are more like rules set by external authorities and not the go-to for internal task details. Procedures (C) still feel like the best fit since they lay out the exact steps needed to get stuff done within the org. Policies (B) give the what and why, but not the step-by-step how. So procedures make the most sense here.

Yeah, I agree with C here. Procedures break down the tasks into clear steps, which is exactly what the question asks for. Policies and standards are too broad for this context. C

It’s definitely C. Procedures are designed to give you the exact how-to for tasks, making sure everyone follows the same process. Policies set the direction, and standards set the benchmarks, but neither tell you step-by-step what to do. Since the question asks specifically about “detailed steps,” procedures fit best without any doubt.

C, procedures are all about the exact steps to get things done, unlike policies or standards which are more about rules or goals.

D imo, regulations are more about rules set by external authorities, not the internal step-by-step tasks. Since policies set the overall guidelines and standards are broader requirements, procedures make the most sense for detailed task instructions.

C imo, procedures break down the tasks into clear steps for consistency.

I think the answer is C. Procedures because they usually outline the step-by-step actions needed to follow policies properly.