Q). Which one of the following is a pre-requiste for a security architecture?

1. Security Policy
2. Standards
3. Technical Solutions
4. Security Guidelines

Answer:

The answer is '1' Security Policy. A security policy is a broad document which describes the management views on the overall way in which they want to control the security of information. A security architecture on the other hand deals with the design of the various security mechanisms. Thus, a security architecture can only be built once the broad level secuirty policy is in place. Choices 2, 3 and 4 are clearly wrong.