Within the context of the CBK, which of the following provides a MINIMUM level of security ACCEPTABLE for an environment ? 

Answer options:

A. A baseline
B. A standard
C. A procedure
D. A guideline

A

Baselines provide the minimum level of security necessary throughout the organization. Standards specify how hardware and software products should be used throughout the organization. Procedures are detailed step-by-step instruction on how to achieve certain tasks. Guidelines are recommendation actions and operational guides to personnel when a specific standard does not apply. Source: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2002, chapter 3: Security Management Practices (page 94).