Which policy defines the access, management, and monitoring of firewalls in an organization?

Which policy defines the access, management, and monitoring of firewalls in an organization?

• A. Firewall- Management Policy
• B. Information-Protection Policy
• C. Special-Access Policy
• D. Remote-Access Policy

Answer: (A)

Access to and control of security devices, along with how their activity is tracked, is defined by a policy focused on those devices. The Firewall- Management Policy specifies who may access firewall management interfaces, how configuration changes are approved and implemented, and how firewall logs and alerts are monitored and audited. This makes it the most direct and comprehensive rule set for governing the access, management, and monitoring of firewalls in an organization. Other policies address related areas but not the firewall itself in this specific way. An Information-Protection Policy covers safeguarding data in general, not the procedural controls around firewall devices. A Special-Access Policy concerns granting elevated access to systems or resources, but not the ongoing management and monitoring of firewalls. A Remote-Access Policy deals with how users connect from remote locations, rather than how firewalls are managed and observed.

Access to and control of security devices, along with how their activity is tracked, is defined by a policy focused on those devices. The Firewall- Management Policy specifies who may access firewall management interfaces, how configuration changes are approved and implemented, and how firewall logs and alerts are monitored and audited. This makes it the most direct and comprehensive rule set for governing the access, management, and monitoring of firewalls in an organization.

Other policies address related areas but not the firewall itself in this specific way. An Information-Protection Policy covers safeguarding data in general, not the procedural controls around firewall devices. A Special-Access Policy concerns granting elevated access to systems or resources, but not the ongoing management and monitoring of firewalls. A Remote-Access Policy deals with how users connect from remote locations, rather than how firewalls are managed and observed.