Multiple choice server

What is the first thing to do when implementing a security policy?

  1. Train the users

  2. Install a firewall

  3. Create a written plan

  4. Use a strong password

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

A written security policy establishes the foundation by defining what needs protection, acceptable use, incident response procedures, and compliance requirements. Technical controls and user training must flow from this documented plan to be effective.