Security Risks and Controls

Question 1

Enforces CIA triads in the digital space. Ex: firewall rules, access control lists, intrusion prevention systems, and encryption

Answer 1

Technical Controls

Question 2

includes the processes that we put in place to manage technology in a secure manner. Ex: user access reviews, log monitoring, and vulnerability management

Answer 2

Operational Controls

Question 3

are procedural mechanisms that focus on the mechanics of the risk management process. Examples: periodic risks assessments and security planning exercises

Answer 3

Managerial Controls

Question 4

intends to stop a security issue before it occurs. Examples: Firewalls and encryption are examples of this

Answer 4

Preventative Controls

Question 5

identify security events that have already occured, Examples:NIDS

Answer 5

Detective Controls

Question 6

remediate security issues that have already occurred. Example: restoring backups after a ransomware attack

Answer 6

Corrective Controls

Question 7

Seek to prevent an attacker from attempting to violate security policies. Example: Viscous guard dogs and barbed wire fences

Answer 7

Deterrent Controls

Question 8

are security controls that impact the physical world. Examples: fences, perimeter lighting, locks, fire suppression systems, and burglar systems

Answer 8

Physicals Controls

Question 9

are controls designed to mitigate the risk associated with exceptions made to a security policy

Answer 9

Compensating Controls

Question 10

is the risk that an organization will become less effective in meeting its major goals and objectives as a result of the breach

Answer 10

Strategic Risk

Question 11

is risk to the organization’s ability to carry out it’s day to day functions

Answer 11

Organizational Risk

Question 12

occurs when a security breach causes an organization to run afoul of legal or regulatory requirements

Answer 12

Compliance Risk