Which document established the baseline information security requirements for the Department of Defense?

Which document established the baseline information security requirements for the Department of Defense?

• A. EO 13526
• B. NIST SP 800-53
• C. DoD 5200.2-R
• D. DoD 5105-?̲

Answer: (C)

The question is about where DoD’s minimum information security requirements are defined. DoD 5200.2-R, the Department of Defense Information Security Program, is the regulation that establishes the DoD Information Security Program and sets the baseline requirements for safeguarding, handling, and disseminating national security information, including classification, access controls, and incident reporting. This makes it the authoritative DoD document for the baseline security standards that components must follow. While government-wide policy (such as EO 13526) and general controls guidance (like NIST SP 800-53) influence practices, the DoD-specific baseline is captured in DoD 5200.2-R.

The question is about where DoD’s minimum information security requirements are defined. DoD 5200.2-R, the Department of Defense Information Security Program, is the regulation that establishes the DoD Information Security Program and sets the baseline requirements for safeguarding, handling, and disseminating national security information, including classification, access controls, and incident reporting. This makes it the authoritative DoD document for the baseline security standards that components must follow. While government-wide policy (such as EO 13526) and general controls guidance (like NIST SP 800-53) influence practices, the DoD-specific baseline is captured in DoD 5200.2-R.