Security Asset Protection Professional Certification (SAPPC) Certification Practice Exam

Which of the following policies governs the DoD Information Security Program?

1. E.O. 13526

2. DoD Directive 5200.02

3. National Defense Authorization Act

4. Homeland Security Act

The correct answer is: E.O. 13526

The DoD Information Security Program is primarily governed by DoD Directive 5200.02. This directive establishes specific guidelines and procedures for the classification, safeguarding, and declassification of national security information within the Department of Defense. It provides the framework necessary for the management of information security across the DoD, outlining the responsibilities of various entities and ensuring compliance with federal regulations concerning national security information. In contrast, while Executive Order 13526 does provide overarching principles for the classification and safeguarding of national security information, it is not specific to the Department of Defense; rather, it applies to all federal agencies. Therefore, while it plays a role at a higher level, it does not exclusively govern the Department's unique policies. The National Defense Authorization Act primarily focuses on the federal budget and policies related to military operations and defense spending. While security issues may be addressed in broader terms, it is not a directive that specifically governs the information security program. Similarly, the Homeland Security Act pertains to the establishment of the Department of Homeland Security and policies for securing the nation against threats, which is not directly related to the governance of the DoD Information Security Program. Thus, DoD Directive 5200.02 stands out as the relevant and specific policy that effectively governs the