Which term describes descriptions of what leading firms are doing about security?

• A. Best practices
• B. Recommended practices
• C. Baselines
• D. Standards

Answer: (A)

Best practices describe the proven, widely adopted methods that leading firms actually use to secure their environments. This label fits because it conveys what top organizations do in practice to achieve strong security, not just formal rules or minimum requirements. Standards are formal rules that must be followed, baselines are minimum levels, and recommended practices are guidance—none of these capture the idea of industry leaders modeling their actions after what works best the way “best practices” does.