Security Controls

Question 1

What are Technical Controls

Answer 1

Controls implemented using systems.
- Operating System controls
-Fire Walls
-AntiVirus

Question 2

What are Managerial Controls

Answer 2

Administrative Controls associated with security design and implementation
-Security Policies
-Standard Operating Procedures (SOP)

Question 3

What are Operation Controls

Answer 3

Controls implemented by people instead of systems
-Security Guards
-Awareness Programs

Question 4

What are Physical Controls

Answer 4

Limits Physical Access
-Guard Shack
-Fences, locks
-Badge readers

Question 5

What are Preventative control types

Answer 5

Blocks access to a resource
-Fire wall rules
-follow security policy
-Guard Shack checks identification
-Enable door locks

Question 6

What are Deterrent control types

Answer 6

Discourages intrusion attempts but does not directly prevent access
-Application splash screens
-threat of demotion
-Front desk reception
-Posted warning signs

Question 7

What are Detective control types

Answer 7

Identify and log intrusion attempts, may not prevent access
-Collect and review system logs
-Review login reports
-Regularly patrol the property
-Enable motion detectors

Question 8

What are Corrective control types

Answer 8

Applying a control after an event has been detected, reverse the impact of an event, continue operating with minimal downtime
-Restoring from backups can mitigate a ransomware infection
-Create policies for reporting security issues
-Contact law enforcement to mange criminal activity
-Use a fire extinguisher

Question 9

What is a Compensating control type

Answer 9

Control using other means, may be temporary
-Prevent the exploitation of a weakness
-implement separation of duties
-back up generator

Question 10

What is a Directive control type

Answer 10

Do this please!?
-store sensitive files in a protected folder
-Create compliance policies and procedures
-Train users on proper security policy
-Post a sign for
Authorized Personnel Only”