What is the role of a security policy in an industrial organization?

• A. To describe marketing strategies
• B. To establish rules, responsibilities, and standards for protecting people, property, and information.
• C. To specify HR hiring quotas
• D. To record annual profits

Answer: (D)

A security policy establishes how an organization protects people, property, and information by defining who is responsible, what actions are allowed or required, and the standards that must be followed. It provides the governance framework for security programs, guiding risk management, day-to-day decisions, and incident response. In an industrial setting, it covers areas like physical security (perimeter controls, access badges, visitor procedures), personnel security (background checks, security training), and information security (data classification, access controls, cybersecurity practices). This policy anchors procedures, standards, and training, helping ensure consistent practices across the organization and supporting compliance with laws and industry regulations. The other options describe marketing, HR quotas, or profit recording—functions outside the purpose of a security policy.