The security controls that are implemented to manage physical security are divided in various groups. Which of the following services are offered by the administrative physical security control group?

Question

Options

• AConstruction and selection
• BSite management
• CAwareness training
• DAccess control
• EIntrusion detection
• FPersonnel control

• A
  78% (21)
• D
  15% (4)
• E
  7% (2)

Explanation

Administrative physical security controls encompass policy, planning, and people-management decisions made by an organization. Construction and selection (A) involves choosing and designing secure facilities - an administrative decision made before any hardware is deployed. Site management (B) covers the ongoing policies and procedures governing how a facility is operated. Awareness training (C) is a hallmark of administrative controls, as it shapes human behavior through education. Personnel control (F) governs hiring practices, background checks, and access authorization - all policy-driven administrative functions.

Why D and E are wrong: Access control (D) and intrusion detection (E) belong to the physical/technical control group - they are implemented through tangible mechanisms like locks, card readers, motion sensors, and alarm systems, not through policy or management decisions.

Memory tip: Think "administrative = paper and people." If the control lives in a document, a training room, or an HR process, it's administrative. If it requires hardware, wiring, or a physical barrier, it's a physical/technical control.

No community discussion yet for this question.