Question

Security standards provide guidance towards achieving specific security policies. Standards are formal documents that establish:

1) details of how the program runs;
2) who is responsible for day-to-day work;
3) how training and awareness are conducted, and
4) how compliance is handled.

Answer 1

4. How compliance is handled.

Step-by-step explanation:

In Information, communication and technology there are Security standards. Information security implies all the measures put in place, to ensure that privacy and confidentiality are maintained.

Information compliance comes into play when there is a third party. When different organizations do business, they might want to ascertain the level of security each other has. This is where information compliance becomes necessary.

Standards are formal documents that establish how compliance is handled. So if business 'A' evaluates the standards operated by business 'B', then they would be able to know how compliant they are. An example of such a standard is ISO:27001.