CGRC · Question #243
Physical and Environmental controls and personnel security controls are examples of what type of controls with respect to their provision? Response:
The correct answer is D. Common controls. Physical, environmental, and personnel security controls are typically managed at an organizational level and shared across multiple information systems, making them examples of common controls. These controls provide a security capability that is inherited by systems within…
Question
Physical and Environmental controls and personnel security controls are examples of what type of controls with respect to their provision? Response:
Options
- ATechnical controls
- BSystem specific controls
- CHybrid controls
- DCommon controls
How the community answered
(45 responses)- A2% (1)
- B7% (3)
- C2% (1)
- D89% (40)
Why each option
Physical, environmental, and personnel security controls are typically managed at an organizational level and shared across multiple information systems, making them examples of common controls. These controls provide a security capability that is inherited by systems within the organization.
Technical controls are security safeguards implemented through technological means, such as firewalls or encryption, rather than physical, environmental, or administrative/personnel means.
System-specific controls are implemented directly by or for a particular information system, as opposed to being shared across multiple systems.
Hybrid controls are those where some aspects are common and some are system-specific, but the question describes controls that are broadly inherited.
Common controls are security controls that are inherited by multiple information systems throughout an organization, rather than being implemented specifically for a single system. Physical and environmental controls (like facility access, power, cooling) and personnel security controls (like background checks, security awareness training) are typically implemented once at an organizational level and apply to all systems housed within that environment or managed by that personnel, thus serving as common controls.
Concept tested: Types of security controls-common controls
Source: https://csrc.nist.gov/glossary/term/common_control
Topics
Community Discussion
No community discussion yet for this question.