Public-works IT must enforce measurable password length, MFA for remote access, badge requirements for server rooms, and approved encryption algorithms. Which artifact type sets those mandatory specifics?
Select an answer to reveal the explanation.
Short Explanation
Standards are the measurable yardsticks—password length, MFA, badge rules, allowed crypto—that public-works must meet. Guidelines can suggest; standards say “this is required.” Slogans and unread vendor blogs do not create enforceable baselines.
Full Explanation
Standards translate high-level policy into mandatory, testable requirements such as password, access-control, physical-security, and encryption baselines. Informal guidance, unadopted vendor content, and slogans lack enforceable specificity. Auditors and operators rely on standards to know what “compliant” means in measurable terms.