mediumMultiple Choice
CISA Practice Question: Which policy hierarchy document provides detailed…
Which policy hierarchy document provides detailed steps for performing a specific task, such as resetting a user password?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Work instruction
A work instruction is the most detailed document in the policy hierarchy, providing step-by-step guidance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Guideline
Why it's wrong here
A guideline offers discretionary recommendations and best practise advice, so it cannot prescribe the exact steps for resetting a password. It is tempting because guidelines are operational and task-focused, but a procedure is the document that mandates detailed sequential steps for performing a specific task.
- ✓
Work instruction
Why this is correct
A work instruction sits at the lowest level of the policy hierarchy, beneath policies, standards and procedures, and gives step-by-step operational detail for a single task. Resetting a user password is exactly that granular, task-specific level of guidance.
- ✗
Policy
Why it's wrong here
A policy states management intent and mandatory rules, not step-by-step task instructions, so it cannot supply the resetting procedure. It is tempting because policies do govern password management, but the document holding detailed sequential steps for one task is the procedure.
- ✗
Standard
Why it's wrong here
A standard specifies mandatory requirements, rules or configurations, not step-by-step task instructions. It is tempting because standards sit low in the policy hierarchy and sound operational, but detailed procedural steps belong in a procedure, which documents exactly how to perform a task such as resetting a password.
About these practice questions
Courseiva writes every CISA question from scratch — 934 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.