CRISC · Question #282
A poster has been displayed in a data center that reads. "Anyone caught taking photographs in the data center may be subject to disciplinary action." Which of the following control types has been…
The correct answer is C. Deterrent. The poster serves as a deterrent control because it discourages unauthorized photography by warning of potential consequences, aiming to prevent the action before it occurs.
Question
A poster has been displayed in a data center that reads. "Anyone caught taking photographs in the data center may be subject to disciplinary action." Which of the following control types has been implemented?
Options
- ACorrective
- BDetective
- CDeterrent
- DPreventative
How the community answered
(25 responses)- A8% (2)
- B4% (1)
- C88% (22)
Why each option
The poster serves as a deterrent control because it discourages unauthorized photography by warning of potential consequences, aiming to prevent the action before it occurs.
Corrective controls are applied after an incident to repair damage or restore systems, which is not what the poster does.
Detective controls identify incidents that have already occurred, whereas the poster aims to prevent the action from happening in the first place through warning.
A deterrent control aims to discourage individuals from performing an unauthorized or unwanted action by threatening negative consequences. The poster explicitly warns of disciplinary action, intending to deter potential photographers from taking pictures in the data center.
Preventative controls physically or logically stop an action from occurring, whereas a deterrent control aims to discourage the action through psychological impact.
Concept tested: Control types (deterrent)
Source: https://csrc.nist.gov/glossary/term/deterrent_control
Topics
Community Discussion
No community discussion yet for this question.