Which security policy would address the process of updating AP configurations?

Which security policy would address the process of updating AP configurations?

• A. Acceptable Use Policy
• B. Data Retention Policy
• C. Organizational Policy
• D. Incident Response Policy

Answer: (C)

Managing updates to wireless access point configurations is a change-management activity that needs an overarching framework guiding who can request changes, who must approve them, how they’re tested, documented, and rolled back if something goes wrong. An organizational policy provides this broad governance, outlining roles, responsibilities, and the processes required to implement security-related changes consistently across all systems, including APs. It helps ensure updates don’t introduce new vulnerabilities or disrupt service by enforcing standards, approvals, testing, and auditability. Other policies address different concerns. An Acceptable Use Policy codifies how users may use network resources, not how devices are configured. A Data Retention Policy specifies how long data is kept and how it’s disposed of. An Incident Response Policy describes steps to detect and respond to security incidents, not routine configuration changes.

Managing updates to wireless access point configurations is a change-management activity that needs an overarching framework guiding who can request changes, who must approve them, how they’re tested, documented, and rolled back if something goes wrong. An organizational policy provides this broad governance, outlining roles, responsibilities, and the processes required to implement security-related changes consistently across all systems, including APs. It helps ensure updates don’t introduce new vulnerabilities or disrupt service by enforcing standards, approvals, testing, and auditability.

Other policies address different concerns. An Acceptable Use Policy codifies how users may use network resources, not how devices are configured. A Data Retention Policy specifies how long data is kept and how it’s disposed of. An Incident Response Policy describes steps to detect and respond to security incidents, not routine configuration changes.