questions with verified answers
Compensating Controls Ans✓✓✓ - Control procedures that compensate for the
deficiency in other controls
- May be temporary
Corrective Controls Ans✓✓✓ - Applying a control after an event has been
detected
- Reverse the impact of an event
- Continue operating with minimal downtime
Detective Controls Ans✓✓✓ - Identify and log an intrusion attempt
- May not prevent access
Deterrent Controls Ans✓✓✓ - Discourages an intrusion attempt
- Doesn't directly prevent access
Directive Controls Ans✓✓✓ - Direct a subject towards security compliance
- A relatively weak security control
Managerial Compensating Controls examples Ans✓✓✓ Separation of duties
Managerial Control Ans✓✓✓ - Administrative controls associated with security
design and implementation
- Security policies, standard operating procedures
, Managerial Corrective Control example Ans✓✓✓ Creating policies for reporting
security issues
Managerial Detective Control example Ans✓✓✓ Review login reports
Managerial Deterrent Control example Ans✓✓✓ Threat of demotion, sanctions,
punishments
Managerial Directive Controls examples Ans✓✓✓ Compliance policies
Managerial Preventative Control example Ans✓✓✓ Security Policy, On-boarding
policy
Managing security controls Ans✓✓✓ - Their are many categories of control
which organizations will use in multiple types
- Security controls change as systems and processes evolve
Operational Compensating Controls examples Ans✓✓✓ Simultaneous security
staff
Operational Controls Ans✓✓✓ - Controls implemented by people instead of
technical systems.
- Security guards, awareness programs
Operational Corrective control example Ans✓✓✓ Law enforcement