GENERAL SECURITY CONCEPTS

Question 1

PREVENTIVE CONTROLS

Answer 1

Stop security incidents by preventing unauthorised access or activities.

Question 2

DETERRENT CONTROLS

Answer 2

Discourage attackers by increasing perceived risk or difficulty.
(e.g. warning signs, security cameras)

Question 3

DETECTIVE CONTROLS

Answer 3

Identify security incidents after they occur.

(e.g. intrusion detection systems, security audits)

Question 4

CORRECTIVE CONTROLS

Answer 4

Reduce impact of security incidents and restore affected systems.

Question 5

COMPENSATING CONTROLS

Answer 5

Address security requirements when primary controls are ineffective.
(e.g. risk acceptance, business continuity planning)

Question 6

DIRECTIVE CONTROLS

Answer 6

Provide guidance on compliance with security policies and standards.
(e.g. security policies, training)