Security Controls 5.7

Question 1

Security Controls

Answer 1

Many different types of risks. Assets are varied; computer systems, physical property, data. Our job is to prevent security events, minimize their impact, and limit the damage.

Question 2

Control Types

Answer 2

Technical Control, Administrative Control, Physical Control

Question 3

Deterrent

Answer 3

May not prevent access, but discourages intrusion. These are warning signs, login banners. These are preventive in nature. Physical control access; door locks, security guard, firewall.

Question 4

Detective

Answer 4

May not prevent access, but identifies and records any intrusion attempts. Motion detectors, IDS/IPS. There is some compensation to attacks; you can restore your data from known good backups.

Question 5

Corrective

Answer 5

Designed to mitigate damage. IPS can block an attacker. Backups can mitigate a ransomware infection, a backup site can provide options if a storm hits.