Question $6(2$ points$)$

A good security policy should be "a formal, brief, and high$-$level statement or plan",

focus on desired results not specific technical details, and address any governmental

and$/$or industry$-$specific regulations.

True

False