ISC2 Exam ISSEP Topic 1 Question 23 Discussion

The various CNSS issuances are as follows:

Policies: It assigns responsibilities and establishes criteria (NSTISSP) or (CNSSP).

Directives: It establishes or describes policy and programs, provides authority, or assigns

responsibilities (NSTISSD).

Instructions: It describes how to implement the policy or prescribes the manner of a policy (NSTISSI).

Advisory memoranda: It provides guidance on policy and may cover a variety of topics involving

information assurance,

telecommunications security, and network security (NSTISSAM).