A cybersecurity company implemented an access control software that allows only authorized personnel to access sensitive files. Which type of control has the company implemented in this case?

The correct answer is A. Preventive control. Access control software is designed to prevent unauthorized access by enforcing authentication and authorization mechanisms. This aligns with ISO/IEC 27001:2022 Annex A Control A.5.18 (Access Rights).

Fundamental Principles and Concepts of an ISMS

Question

Options

APreventive control
BDetective control
CCorrective control

How the community answered

(23 responses)

A
87% (20)
B
9% (2)
C
4% (1)

Explanation

Access control software is designed to prevent unauthorized access by enforcing authentication and authorization mechanisms. This aligns with ISO/IEC 27001:2022 Annex A Control A.5.18 (Access Rights).

Topics

#preventive control#control types#access control#information security controls

Community Discussion

No community discussion yet for this question.

Full ISO-IEC-27001-LEAD-AUDITOR Practice