Which term refers to the general direction and goals provided by an organization, forming a framework for security efforts?

• A. Organizational Security Policies
• B. Overt
• C. Issue-specific Policies
• D. Load Balancing

Answer: (A)

The general direction and goals provided by an organization that shape how security is planned and enacted are organizational security policies. These policies express management’s intent, establish the security posture, and set the authoritative baseline for everything the organization does in security. They define who is responsible for actions, what controls and compliance requirements apply, and how security will be measured and enforced. Because they are broad and official, they serve as the framework within which all other security activities—standards, procedures, and specific policy areas—are developed and aligned with business objectives. For example, a high-level policy might require encryption for sensitive data in transit and specify who must approve access controls, guiding all related protections and processes.

The other terms don’t fit because “overt” isn’t about governance or direction for security programs, “issue-specific policies” cover specific topics rather than the entire framework, and “load balancing” is a technical method for distributing network or application traffic, not a governance document.