What is the primary role of a cybersecurity standard as described in the course material?

### Why this is right A cybersecurity standard states what security outcomes an enterprise must achieve to fulfill its stated objectives. It supports consistent and measurable implementation of strategy and policy. ### The concept A standard describes the required result, not necessarily the method or product used to obtain it. This distinction lets an organization select implementation solutions appropriate to its context while still assessing whether the required security outcome is met. The course material explicitly separates standards from their implementation and solutions. ### The other options - **To prescribe one specific technology solution for every organization**: This confuses the required outcome with an implementation choice. - **To replace an organization's security policies**: Standards support and direct policies rather than replace them. - **To provide only optional advice to employees**: This describes a guideline, not a mandatory standard. ### Terms - **Security outcome**: The result an organization must achieve to meet a security objective. - **Implementation**: The way an organization puts a requirement into practice. ### Remember A standard states what must be achieved, not the exact solution used.