To ensure policy content reflects multiple departments, policies should be written by corporate teams involving people from multiple departments.

• A. True
• B. False
• C. Only external consultants
• D. Only IT security

Answer: (A)

Cross-functional collaboration in policy writing ensures the content reflects how the organization actually operates, not just how a single department views security. When teams from IT, legal, HR, finance, operations, and security contribute, policies capture diverse requirements, regulatory constraints, and real workflows, making them clearer, more applicable, and easier to enforce. This broad input helps prevent gaps, reduces confusion, and fosters ownership and accountability across the company. If policies were written by only one group—such as IT security or external consultants—the result could be misaligned with business processes or regulatory needs, and adoption would suffer.