1A. Identify Security Control Types obj 5.3

Question 1

Role of Cybersecurity analyst

Answer 1

Responsible for protecting sensitive information and preventing unauthorised access to data and systems

Question 2

Duties of a Cybersecurity analyst

Answer 2

1. Implementing and configuring security controls
2. working in SOC or CSIRT
3. auditing security processes and procedures
4. maintaining up-to-date threat intelligence

Question 3

SOC

Answer 3

Security Operations Centre
- A location where an organisation’s information assets are monitored and protected
- Hard to finance and maintain, used by larger orgs (gov, health) that deal with PII

Question 4

Key principle of a SOC

Answer 4

1) supported by organisational policies
2) balances size/presence without overstepping its bounds
3) motivated staff
4) perform incident response
5) collab with other SOCs

Question 5

What is Security Control?

Answer 5

Technology and procedures put into place to mitigate vulnerabilities and risk to ensure the CIAN of data

Question 6

Name the 3 types of classes of controls

Answer 6

1) Technical (Logical)
- Implemented as a system (hardware, software, firmware)
2) Operational
- implemented by people rather than systems
3) Managerial
- provides oversight of the information system and addresses the design and implementation of security controls

Question 7

What are Preventative controls? Name an example.

Answer 7

A control that acts to eliminate or reduce likelihood that an attack can succeed. E.g., Security awareness training, hardening, security guards, account disablement policy

Question 8

What are Detective controls? Name an example.

Answer 8

A control that does not deter or prevent access, but identifies and records any attempts of intrusion. E.g., SIEM. Log monitoring, motion detection

Question 9

What are Corrective controls? Name an example.

Answer 9

A control that acts to eliminate or reduce the impact of an intrusion event. E.g., IPS, backup and recovery

Question 10

What are Physical Controls? Name an example.

Answer 10

Type of security control that acts against in-person intrusion attempts. E.g., CCTV, Security guards, Biometrics

Question 11

What are Deterrent controls? Name an example.

Answer 11

A security control that discourages instruction attempts. E.g., Cable locks, video surveillance, guards

Question 12

What are Compensating controls? Name an example.

Answer 12

A security control that acts as a substitute for a principle control that cannot be implemented due to financial, infrastructure, or impractical reasons. E.g., Encryption, TOTP