MENU
Which of the following is considered the foundation for the Enterprise Information Security Architecture (EISA)?
Comprehensive and Detailed Explanation (250--350 words)
===========
According to EC-Council CCISO documentation, the foundation of an Enterprise Information Security Architecture (EISA) is the information security policy. The policy defines management intent, governance direction, and strategic objectives that guide architectural decisions.
CCISO materials emphasize that architecture must be driven by policy, not technology. Asset and data classification (Options A and D) are important components but are derived from policy requirements. Security regulations (Option B) inform policy but do not form the architectural foundation.
Therefore, Option C is correct.
Currently there are no comments in this discussion, be the first to comment!