Which statement BEST describes a data policy?

Which statement BEST describes a data policy?

• A. A policy governing how data should be managed and protected
• B. A policy that defines how to encrypt network traffic
• C. A policy about internet browsing
• D. A policy about incident response

Answer: (A)

A data policy defines how data should be managed and protected across its lifecycle, including who may access it, how data is classified, stored, transmitted, retained, and disposed, and what security controls apply. It provides the governance framework that guides all data-related practices in the organization, ensuring consistency and regulatory compliance. Other statements describe specific controls or areas (such as encrypting network traffic, acceptable use of internet, or incident response), which are narrower in scope and fall under the broader data governance framework.

A data policy defines how data should be managed and protected across its lifecycle, including who may access it, how data is classified, stored, transmitted, retained, and disposed, and what security controls apply. It provides the governance framework that guides all data-related practices in the organization, ensuring consistency and regulatory compliance. Other statements describe specific controls or areas (such as encrypting network traffic, acceptable use of internet, or incident response), which are narrower in scope and fall under the broader data governance framework.