Which of the following is NOT an example of an operational control?

The correct answer is B. Auditing. Operational controls are controls over the hardware, the media used and the operators using these resources. Operational controls are controls that are implemented and executed by people, they are most often procedures. Backup and recovery, contingency planning and operations…

Submitted by luis.pe· Apr 18, 2026Security Concepts and Practices

Question

Options

Abackup and recovery
BAuditing
Ccontingency planning
Doperations procedures

How the community answered

(36 responses)

A
6% (2)
B
92% (33)
C
3% (1)

Explanation

Operational controls are controls over the hardware, the media used and the operators using these resources. Operational controls are controls that are implemented and executed by people, they are most often procedures. Backup and recovery, contingency planning and operations procedures are operational controls. Auditing is considered an Administrative / detective control. However the actual auditing mechanisms in place on the systems would be consider operational controls.

Topics

#Security Controls#Operational Controls#Control Types#Security Management

Community Discussion

No community discussion yet for this question.

Full SSCP Practice