A security management process is BEST described by which set of controls?

The correct answer is A. Administrative/managerial. Administrative (managerial) controls govern the security management process itself. They encompass policies, procedures, standards, guidelines, hiring practices, background checks, security awareness training, risk assessments, and oversight functions. The management process is…

Privacy and Security in Healthcare

Question

Options

AAdministrative/managerial
BOperational/physical
CTechnical
DDetective

How the community answered

(34 responses)

A
88% (30)
B
3% (1)
C
6% (2)
D
3% (1)

Explanation

Administrative (managerial) controls govern the security management process itself. They encompass policies, procedures, standards, guidelines, hiring practices, background checks, security awareness training, risk assessments, and oversight functions. The management process is inherently administrative because it involves planning, directing, organizing, and controlling security activities through documented policy frameworks - not through physical barriers (operational/physical), technical mechanisms, or detective techniques. Detective controls identify events after they occur, while administrative controls define how the organization manages security as an ongoing process.

Topics

#Security controls#Administrative controls#Managerial controls#Security management process

Community Discussion

No community discussion yet for this question.

Full HCISPP Practice