Which of the following are the steps usually followed in the development of documents such as security policy, standards and procedures? 

Answer options:

A. design, development, publication, coding, and testing.
B. design, evaluation, approval, publication, and implementation.
C. initiation, evaluation, development, approval, publication, implementation, and maintenance.
D. feasibility, development, approval, implementation, and integration.

C

The common steps used the the development of security policy are initiation of the project, evaluation, development, approval, publication, implementation, and maintenance.The other choices listed are the phases ofthe software development life cycle and not the step used to develop ducuments such as Policies, Standards, etc... Reference: TIPTON, Harold
F. & KRAUSE, MICKI, Information Security Management Handbook, 4th Edition, Volume 3, 2002, Auerbach Publications.