nerdexam
(ISC)2

CGRC · Question #86

Protective measures prescribed to meet the security requirements (i.e., confidentiality, integrity, and availability) specified for an information system. Safeguards may include security features, man

The correct answer is A. Safeguards. The definition provided, describing protective measures used to meet security requirements and synonymous with security controls and countermeasures, precisely defines "Safeguards."

Selection and Approval of Framework, Security, and Privacy Controls

Question

Protective measures prescribed to meet the security requirements (i.e., confidentiality, integrity, and availability) specified for an information system. Safeguards may include security features, management constraints, personnel security, and security of physical structures, areas, and devices. Synonymous with security controls and countermeasures. Response:

Options

  • ASafeguards
  • BSubsystem
  • CTailored Security
  • DControl Baseline

How the community answered

(42 responses)
  • A
    93% (39)
  • B
    2% (1)
  • D
    5% (2)

Why each option

The definition provided, describing protective measures used to meet security requirements and synonymous with security controls and countermeasures, precisely defines "Safeguards."

ASafeguardsCorrect

Safeguards are protective measures, including security features, management constraints, personnel security, and physical security elements, implemented to protect an information system and its information. They are designed to meet specific security requirements related to confidentiality, integrity, and availability, and are indeed synonymous with security controls and countermeasures.

BSubsystem

A subsystem is a component of a larger system, not a general term for protective measures.

CTailored Security

Tailored security refers to the process of adapting security controls to a specific system's environment, not the protective measures themselves.

DControl Baseline

A control baseline is a set of minimum security controls recommended for a system, but it's the list of controls, not the generic term for protective measures.

Concept tested: Information security terminology (Safeguards/Controls)

Source: https://csrc.nist.gov/glossary/term/safeguard

Topics

#Security Controls#Safeguards#CIA Triad#Information Security Terminology

Community Discussion

No community discussion yet for this question.

Full CGRC Practice