1.1 (Security Control Categories)

Question 1

Technical Controls

Answer 1

● Technologies, hardware, and software mechanisms that are implemented to manage and reduce risks.

Question 2

Managerial Controls

Answer 2

● Sometimes also referred to as administrative controls
● Involve the strategic planning and governance side of security

Question 3

Operational Controls

Answer 3

● Procedures and measures that are designed to protect data on a day-to-day basis.
● Are mainly governed by internal processes and human actions

Question 4

Physical Controls

Answer 4

● Tangible, real-world measures taken to protect assets