CGRC · Question #665
Actions, devices, procedures, techniques, or other measures that reduce the vulnerability of an information system. Synonymous with security controls and safeguards. Response:
The correct answer is A. Countermeasures. The question defines a term that refers to actions, devices, or procedures designed to reduce information system vulnerabilities, explicitly stating it is synonymous with security controls and safeguards.
Question
Actions, devices, procedures, techniques, or other measures that reduce the vulnerability of an information system. Synonymous with security controls and safeguards. Response:
Options
- ACountermeasures
- BRoutinemeasures
- CDatameasures
- DTimemeasures
How the community answered
(43 responses)- A88% (38)
- B2% (1)
- C2% (1)
- D7% (3)
Why each option
The question defines a term that refers to actions, devices, or procedures designed to reduce information system vulnerabilities, explicitly stating it is synonymous with security controls and safeguards.
Countermeasures are specific actions, mechanisms, or strategies implemented to deter, prevent, detect, or mitigate threats against an information system or its assets. They directly address identified vulnerabilities and are often interchangeably used with terms like security controls or safeguards to enhance security posture.
"Routinemeasures" is not a recognized term in information security.
"Datameasures" is not a recognized term in information security.
"Timemeasures" is not a recognized term in information security.
Concept tested: Information Security Countermeasures
Source: https://www.nist.gov/privacy-framework/glossary-terms#C
Topics
Community Discussion
No community discussion yet for this question.