High-level Security Requirements primarily focus on which areas?

High-level Security Requirements primarily focus on which areas?

• A. Focuses on encryption and key management only
• B. Focuses on user authentication methods
• C. Mainly focuses on the security disciplines, safeguards, procedures, continuity of operations, and documentation.
• D. Focuses on firewall rule optimization

Answer: (C)

High-level security requirements establish the overarching framework for a security program. They describe the security disciplines and safeguards, the procedures people follow, plans to maintain operations during disruptions (continuity of operations), and the documentation that records policies, decisions, and evidence of compliance. This broad scope guides the development and implementation of concrete controls across technology, people, and processes, rather than prescribing a single technical measure. The other options point to specific technical aspects—encryption and key management, user authentication methods, or firewall rule tuning—which are important but fall under detailed controls that come from the high-level requirements. So the best fit is the emphasis on disciplines, safeguards, procedures, continuity, and documentation.

High-level security requirements establish the overarching framework for a security program. They describe the security disciplines and safeguards, the procedures people follow, plans to maintain operations during disruptions (continuity of operations), and the documentation that records policies, decisions, and evidence of compliance. This broad scope guides the development and implementation of concrete controls across technology, people, and processes, rather than prescribing a single technical measure. The other options point to specific technical aspects—encryption and key management, user authentication methods, or firewall rule tuning—which are important but fall under detailed controls that come from the high-level requirements. So the best fit is the emphasis on disciplines, safeguards, procedures, continuity, and documentation.