Study. uk . com
  1. Home
  2. All questions
  3. Question 201

CompTIA Security+ study material · question 201 of 611

Why is a policy document on its own a weak control?

  1. Because policies are managerial rather than technical
  2. Because policies cannot be audited
  3. Because policies expire annually
  4. Because a directive control works only when enforced by another control or by consequence
Show the answer

Answer: D. Because a directive control works only when enforced by another control or by consequence

Telling people what to do changes behaviour only when something makes non-compliance visible or costly.

Challenge yourself on this topic → Study as cards