CCSP · Question #118
Which of the following are not examples of personnel controls?
The correct answer is C. Strict access control mechanisms. Strict access control mechanisms are considered technical or administrative controls, not personnel controls, which focus on human factors.
Question
Which of the following are not examples of personnel controls?
Options
- ABackground checks
- BReference checks
- CStrict access control mechanisms
- DContinuous security training
How the community answered
(36 responses)- A3% (1)
- B3% (1)
- C89% (32)
- D6% (2)
Why each option
Strict access control mechanisms are considered technical or administrative controls, not personnel controls, which focus on human factors.
Background checks are personnel controls used to vet individuals before employment to assess their trustworthiness.
Reference checks are personnel controls used to verify information and assess a candidate's suitability for a role.
Strict access control mechanisms are technical or administrative controls implemented to restrict access to systems and data based on predefined rules. Personnel controls, by contrast, relate to the human element of security, such as screening, training, and management of staff.
Continuous security training is a personnel control designed to educate employees on security policies and best practices, maintaining awareness.
Concept tested: Types of security controls (personnel vs. technical)
Source: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final
Topics
Community Discussion
No community discussion yet for this question.