ISC2 HCISPP Exam - Topic 5 Question 93 Discussion

Actual exam question for ISC2's HCISPP exam

Question #: 93
Topic #: 5

Which one of the following is NOT a fundamental component of a Regulatory Security Policy?

AWhat is to be done.

BWhen it is to be done.

CWho is to do it.

DWhy is it to be done
Regulatory Security policies are mandated to the organization but it up to them to implement it.
'Regulatory - This policy is written to ensure that the organization is following standards set by
a specific industry and is regulated by law. The policy type is detailed in nature and specific to a
type of industry. This is used in financial institutions, health care facilities, and public utilities.'

Show Suggested Answer

Suggested Answer: B

by Shawnna at Jul 09, 2024, 12:35 AM

Limited Time Offer

25%

Off

Get Premium HCISPP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jeffrey

4 months ago

I thought "why" was fundamental, but maybe not in this context?

upvoted 0 times

...

Corrie

5 months ago

Wait, are we sure about B? Seems pretty crucial too.

upvoted 0 times

...

Matilda

5 months ago

Agreed, C is essential for accountability.

upvoted 0 times

...

Lacey

5 months ago

I think D is also important, but not fundamental.

upvoted 0 times

...

Lawana

5 months ago

Definitely A, that's just a statement.

upvoted 0 times

...

Rhea

6 months ago

From what I recall, the "Who is to do it" is crucial for accountability, so it can't be the answer. I might lean towards "Why is it to be done" as the one that's not fundamental.

upvoted 0 times

...

Lettie

6 months ago

I feel like I've seen a similar question before, and it was about the roles and responsibilities in a policy. Maybe "What is to be done" is essential, but I'm not confident.

upvoted 0 times

...

Karan

6 months ago

I think "Why is it to be done" might be the odd one out since the other options focus more on actions and responsibilities.

upvoted 0 times

...

Cristal

6 months ago

I remember discussing the components of a Regulatory Security Policy in class, but I'm not entirely sure which one doesn't belong here.

upvoted 0 times

...

Felicidad

6 months ago

I'm a bit confused on this one. The question is asking about the fundamental components, but the options seem to cover the typical elements of any policy. I'll need to think about this more carefully before selecting an answer.

upvoted 0 times

...

Latia

6 months ago

Okay, let me think this through. A Regulatory Security Policy is all about the specific requirements and controls that an organization must implement to comply with industry regulations. The "why" is already given, so that's not a fundamental component. I'm going to go with D.

upvoted 0 times

...

Vivan

6 months ago

Hmm, this is a tricky one. I'm not entirely sure about the answer. I think I need to review the key components of a Regulatory Security Policy again to make sure I understand the differences between them.

upvoted 0 times

...

Rolande

6 months ago

I'm pretty confident that the answer is D. The fundamental components of a Regulatory Security Policy are what, when, and who, but not why it's done. The policy is mandated by regulations, so the "why" is already established.

upvoted 0 times

...

Silvana

6 months ago

This question seems straightforward. The key is to identify the type of web usage described, which involves collaboration, user-generated content, and social media.

upvoted 0 times

...

Sherrell

6 months ago

I'm a little confused by the wording of the options. Are they asking us to create a table or a view? I'll need to read the question carefully to make sure I understand what they're looking for.

upvoted 0 times

...

Barrett

11 months ago

If the 'Why' isn't a fundamental component, then I guess the policy writers must be saying 'Because I said so!' Sounds like a parent-child situation to me.

upvoted 0 times

Pearly

9 months ago

True, it's funny how 'Why' is not considered a fundamental component.

upvoted 0 times

...

Mohammad

10 months ago

D) Why is it to be done

upvoted 0 times

...

Frank

10 months ago

Haha, yeah it does sound like a parent-child situation!

upvoted 0 times

...

Tiffiny

10 months ago

D) Why is it to be done

upvoted 0 times

...

German

10 months ago

C) Who is to do it.

upvoted 0 times

...

Roselle

10 months ago

C) Who is to do it.

upvoted 0 times

...

Eve

10 months ago

B) When it is to be done.

upvoted 0 times

...

Theron

10 months ago

B) When it is to be done.

upvoted 0 times

...

Rikki

10 months ago

A) What is to be done.

upvoted 0 times

...

Sonia

10 months ago

A) What is to be done.

upvoted 0 times

...

Fallon

12 months ago

I'm going to have to triple-check the details on Regulatory Security Policies. This question is making my head spin like a top!

upvoted 0 times

Rodolfo

10 months ago

C) Who is to do it.

upvoted 0 times

...

Chaya

10 months ago

B) When it is to be done.

upvoted 0 times

...

Bernardine

10 months ago

D) Why is it to be done

upvoted 0 times

...

Maryann

11 months ago

A) What is to be done.

upvoted 0 times

...

Lizbeth

11 months ago

C) Who is to do it.

upvoted 0 times

...

Gail

11 months ago

B) When it is to be done.

upvoted 0 times

...

Sherell

11 months ago

A) What is to be done.

upvoted 0 times

...

Hui

12 months ago

Ah, I see! The 'Why' is not a fundamental component, as the policy is mandated by regulations. Time to put on my detective hat and solve this mystery.

upvoted 0 times