nerdexam
(ISC)2

CGRC · Question #437

The management, operational, and technical controls (i.e., safeguards or countermeasures) prescribed for an information system to protect the confidentiality, integrity, and availability of the…

The correct answer is A. Security Controls. Security Controls are the safeguards or countermeasures applied to an information system to protect its confidentiality, integrity, and availability. These controls encompass management, operational, and technical aspects.

Selection and Approval of Framework, Security, and Privacy Controls

Question

The management, operational, and technical controls (i.e., safeguards or countermeasures) prescribed for an information system to protect the confidentiality, integrity, and availability of the system and its information. Response:

Options

  • ASecurity Controls
  • BConfiguration Controls
  • CHybrid Controls
  • DSystem-Specific Control

How the community answered

(29 responses)
  • A
    90% (26)
  • B
    7% (2)
  • D
    3% (1)

Why each option

Security Controls are the safeguards or countermeasures applied to an information system to protect its confidentiality, integrity, and availability. These controls encompass management, operational, and technical aspects.

ASecurity ControlsCorrect

Security controls are the protective measures and safeguards prescribed for an information system, categorized as management, operational, and technical, which collectively protect the confidentiality, integrity, and availability (CIA) of the system and its information. This is a fundamental definition in information security.

BConfiguration Controls

Configuration controls specifically relate to managing changes to hardware, software, firmware, and documentation, which is a subset of security controls, not the overarching term for all safeguards.

CHybrid Controls

"Hybrid controls" is not a standard, recognized category or term for the overall set of safeguards in information security frameworks.

DSystem-Specific Control

"System-Specific Control" refers to a control applied to a particular system, but it is still a type of security control and not the broad definition of all prescribed safeguards.

Concept tested: Definition of security controls

Source: https://csrc.nist.gov/glossary/term/security-control

Topics

#Security Controls#CIA Triad#Control Types#Information Security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CGRC Practice