Security control Families

Access Control (AC) correct answer: Organization must limit information system access to.... -authorized users -process acting on behalf of authorized users -devices -types of transactions and function that authorized users are permitted. To exercise. Awareness and Training (AT) correct answer: Organizations must ensure that managers and users of organizational information systems are.... -made aware of the security risk associated with their activities -aware of the applicable ...