In the context of information security, what is a definition for 'control'?

The correct answer is C. A safeguard conceived to guarantee the CIA of data. In information security, a 'control' is any safeguard or countermeasure designed to protect the Confidentiality, Integrity, and Availability (CIA) of data and systems. Controls can be administrative (policies), technical (firewalls, encryption), or physical (locks, guards). The…

Security Principles

Question

Options

AAn encryption technique for data at rest
BA protocol for protected communication
CA safeguard conceived to guarantee the CIA of data
DA document outlining the security policies

How the community answered

(37 responses)

A
3% (1)
B
5% (2)
C
89% (33)
D
3% (1)

Explanation

In information security, a 'control' is any safeguard or countermeasure designed to protect the Confidentiality, Integrity, and Availability (CIA) of data and systems. Controls can be administrative (policies), technical (firewalls, encryption), or physical (locks, guards). The other options describe specific tools or artifacts (encryption techniques, protocols, documents) rather than the broader concept of a control, which is a general term for any protective measure.

Topics

#Information Security Controls#Security Concepts#CIA Triad#Safeguards

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice