Exam CRISC topic 1 question 1366 discussion

Policy is will of board, standards derive from policy procedures are detailed version of standards. Procedures are more granular than standards and support their implementation Going with procedures.

B, outlining procedures on how to implement the control will enable effective control implementation

Going with B.

A. Information security policies Information security policies best enable effective IT control implementation. Policies provide a high-level framework that guides an organization's approach to information security, setting out the principles, goals, and requirements for protecting information assets. They serve as the foundation for designing, implementing, and maintaining IT controls throughout the organization.