CompTIA® Security+™: Study Guide, Fifth Edition

Exam Essentials

Define the elements of a security policy. The security policy sets the internal expectations of how situations, information, and personnel are handled. These policies cover a wide range of the organization. Most policies in an organization affect the security policy.

Understand least privilege. Least privilege states that when assigning permissions, give users only the permissions they need to do their work and no more. The biggest benefit to following this policy is the reduction of risk.

Define the various types of policies that affect security efforts in an organization. The major policies that affect security are human resources and certificate policies. Human resource policies describe expected behavior and other policies ...