CSSLP · Question #64
To help review or design security controls, they can be classified by several criteria . One of these criteria is based on their nature. According to this criterion, which of the following controls co
The correct answer is C. Procedural control. Procedural controls, also known as administrative controls, consist of human-centric or policy-based security measures such as incident response, management oversight, and training.
Question
To help review or design security controls, they can be classified by several criteria . One of these criteria is based on their nature. According to this criterion, which of the following controls consists of incident response processes, management oversight, security awareness, and training?
Options
- ACompliance control
- BPhysical control
- CProcedural control
- DTechnical control
How the community answered
(36 responses)- A3% (1)
- B3% (1)
- C94% (34)
Why each option
Procedural controls, also known as administrative controls, consist of human-centric or policy-based security measures such as incident response, management oversight, and training.
Compliance controls ensure adherence to regulations, which can involve various types of controls, but 'procedural' describes their nature.
Physical controls are tangible barriers and safeguards like locks and guards, which do not include incident response processes or training.
Procedural controls, or administrative controls, are security controls that involve policies, procedures, guidelines, incident response processes, management oversight, and security awareness and training programs, relying on human actions and organizational processes.
Technical controls are hardware or software-based security mechanisms, such as firewalls or encryption, and do not encompass human processes or policies.
Concept tested: Types of security controls - procedural
Source: https://csrc.nist.gov/glossary/term/administrative-controls
Topics
Community Discussion
No community discussion yet for this question.