nerdexam
(ISC)2

CGRC · Question #243

Physical and Environmental controls and personnel security controls are examples of what type of controls with respect to their provision? Response:

The correct answer is D. Common controls. Physical, environmental, and personnel security controls are typically managed at an organizational level and shared across multiple information systems, making them examples of common controls. These controls provide a security capability that is inherited by systems within…

Selection and Approval of Framework, Security, and Privacy Controls

Question

Physical and Environmental controls and personnel security controls are examples of what type of controls with respect to their provision? Response:

Options

  • ATechnical controls
  • BSystem specific controls
  • CHybrid controls
  • DCommon controls

How the community answered

(45 responses)
  • A
    2% (1)
  • B
    7% (3)
  • C
    2% (1)
  • D
    89% (40)

Why each option

Physical, environmental, and personnel security controls are typically managed at an organizational level and shared across multiple information systems, making them examples of common controls. These controls provide a security capability that is inherited by systems within the organization.

ATechnical controls

Technical controls are security safeguards implemented through technological means, such as firewalls or encryption, rather than physical, environmental, or administrative/personnel means.

BSystem specific controls

System-specific controls are implemented directly by or for a particular information system, as opposed to being shared across multiple systems.

CHybrid controls

Hybrid controls are those where some aspects are common and some are system-specific, but the question describes controls that are broadly inherited.

DCommon controlsCorrect

Common controls are security controls that are inherited by multiple information systems throughout an organization, rather than being implemented specifically for a single system. Physical and environmental controls (like facility access, power, cooling) and personnel security controls (like background checks, security awareness training) are typically implemented once at an organizational level and apply to all systems housed within that environment or managed by that personnel, thus serving as common controls.

Concept tested: Types of security controls-common controls

Source: https://csrc.nist.gov/glossary/term/common_control

Topics

#Common controls#Control types#Physical security#Personnel security

Community Discussion

No community discussion yet for this question.

Full CGRC Practice