SAPPC Practice Exam Guide

The policy that governs the DoD Information Security Program is DoD Directive 5200.02. This directive establishes the framework for the Department of Defense's approach to protecting classified information and managing information security. It specifies the roles, responsibilities, and processes for safeguarding sensitive information, ensuring that personnel understand the importance of protecting national security secrets. The option referencing E.O. 13526 pertains to the classification and declassification of national security information more broadly across federal agencies. While this executive order is significant in the overall context of information security, it does not specifically govern the DoD Information Security Program in the same structured manner as DoD Directive 5200.02. Knowing the specific directives within the Department of Defense helps ensure proper compliance with policies that directly affect information security, reinforcing the understanding that these directives are tailored to the unique needs and operations of the DoD.