SSCP · Question #307
Which of the following would best classify as a management control?
The correct answer is A. Review of security controls. Management controls focus on the management of the IT security system and the management of risk for a system. They are techniques and concerns that are normally addressed by management. Routine evaluations and response to identified vulnerabilities are important elements of mana
Question
Which of the following would best classify as a management control?
Options
- AReview of security controls
- BPersonnel security
- CPhysical and environmental protection
- DDocumentation
How the community answered
(20 responses)- A90% (18)
- B5% (1)
- D5% (1)
Explanation
Management controls focus on the management of the IT security system and the management of risk for a system. They are techniques and concerns that are normally addressed by management. Routine evaluations and response to identified vulnerabilities are important elements of managing the risk of a system, thus considered management controls. SECURITY CONTROLS: The management, operational, and technical controls (i.e.,safeguards or countermeasures) prescribed for an information system to protect the confidentiality, integrity, and availability of the system and its information. SECURITY CONTROL BASELINE: The set of minimum security controls defined for a low- impact, moderate-impact,or high-impact information system. The following are incorrect answers: Personnel security, physical and environmental protection and documentation are forms of operational controls.
Topics
Community Discussion
No community discussion yet for this question.