CGRC · Question #126
To help review or design security controls, they can be classified by several criteri
The correct answer is B. Adaptive controls. When classifying security controls by time, preventive controls are designed to stop security incidents from occurring, acting proactively before any compromise can happen.
Question
To help review or design security controls, they can be classified by several criteri
Options
- AOne of these criteria is based on time. According to this criteria, which of the following controls are
- BAdaptive controls
- CPreventive controls
- DDetective controls
- ECorrective controls
How the community answered
(32 responses)- A6% (2)
- B88% (28)
- C3% (1)
- E3% (1)
Why each option
When classifying security controls by time, preventive controls are designed to stop security incidents from occurring, acting proactively before any compromise can happen.
Adaptive controls adjust their behavior based on changing threat landscapes or system states; while important, they are not primarily classified by their temporal position (before, during, or after an event) in the same way as preventive, detective, or corrective controls.
Preventive controls are implemented to prevent unauthorized access, modification, or destruction of information or resources. They act proactively to minimize the likelihood of a security incident occurring by blocking threats before they can succeed.
Detective controls are designed to identify security incidents or policy violations after they have occurred but before significant damage is done.
Corrective controls are implemented to repair damage, restore systems, or recover from a security incident after it has taken place.
Concept tested: Security control types by time
Source: https://www.isaca.org/resources/news-and-trends/isaca-journal/2019/volume-2/cybersecurity-controls-preventive-detective-and-corrective
Topics
Community Discussion
No community discussion yet for this question.