Security Controls Flashcards
All security controls can be categorized as one of three primary types of access controls. (3)
1) Physical Controls
2) Technical / Logicall Controls
3) Administrative / Managerial Controls
Controls implemented to increase physical security posture. Designed to increase capability to who can access a building or secure area.
Physical Controls
Controls implemented through hardware or software to prevent or restrict access
Logical / Technical Controls
A one-time evaluation of a security posture.
Auditing
An ongoing process that continually evaluates a system of its users.
Monitoring
Implemented to manage the organization’s personnel and assets
Administrative / Managerial Controls
Which basic system security control should an administrator enable to ensure that company data is not compromised on a lost or stolen mobile device?
a) Locator application
b) Full-device encryption
c) Swipe lock
d) Remote backup application
b) Full-device encryption
Enabling full-device encryption ensures that if a mobile device is lost or stolen, the data stored on the device is encrypted and cannot be easily accessed by unauthorized users. This is a crucial security measure to protect sensitive company data in the event of a security breach.