Which principles should guide the creation of internal cybersecurity standards? Select ALL correct answers.

### Why this is right - **Link standards to policy**: a policy basis supports relevance and adoption. - **Collaborate with affected stakeholders**: input helps ensure the standard works across business and technical areas. - **Use clear and concise wording**: clarity reduces inconsistent interpretation, while concision supports use. - **State the required outcome rather than prescribing every method**: this keeps the standard focused on what must be achieved. - **Ensure the standard is viable and auditable**: it must be practical and capable of compliance monitoring. ### The concept The source also recommends approval by an appropriate authority, traceability, and regular updates. These principles make standards more likely to be adopted, implemented consistently, and kept relevant as policies, technology, and threats change. ### The other options - **F. Avoid updates so the standard remains unchanged**: policies, technologies, and threats change, so standards require regular review and maintenance. ### Terms - **Auditability**: the ability to verify compliance through monitoring or evidence. - **Stakeholder**: a person or group affected by the standard. ### Remember A good standard is linked, clear, workable, testable, approved, and maintained.