Which of the following are included in Administrative Controls? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is A. Conducting security-awareness training B. Screening of personnel D. Implementing change control procedures E. Developing policy. Administrative controls are management-oriented controls that involve policies, procedures, and human oversight. Conducting security-awareness training (A), screening of personnel (B), implementing change control procedures (D), and developing policy (E) are all administrative…

Selection and Approval of Framework, Security, and Privacy Controls

Question

Options

AConducting security-awareness training
BScreening of personnel
CMonitoring for intrusion
DImplementing change control procedures
EDeveloping policy

How the community answered

(41 responses)

A
93% (38)
C
7% (3)

Explanation

Administrative controls are management-oriented controls that involve policies, procedures, and human oversight. Conducting security-awareness training (A), screening of personnel (B), implementing change control procedures (D), and developing policy (E) are all administrative controls. Monitoring for intrusion (C) is a technical/operational control because it involves automated or technical systems actively watching network activity in real time - it is not a management or procedural control. Therefore C is excluded from the correct answers.

Topics

#Administrative Controls#Security Control Types#Personnel Security#Security Awareness Training

Community Discussion

No community discussion yet for this question.

Full CAP Practice