Controls

Question 1

Functional Order of Physical Controls

Answer 1

6 D’s: Deter, Deny, Detect, Delay, Determine, Decide

Question 2

COBIT

Answer 2

Control Objectives for Information and Related Technologies. It’s a security control framework

Question 3

COBIT 6 Principles

Answer 3

1. Provide stakeholder value
2. Holistic approach
3. Dynamic governance system
4. Governance distinct from Management
   5.Tailored to Enterprise
5. End to End Governance System

Question 4

Classes of Controls (3)

Answer 4

Administrative: aka managerial

Logical/Technical

Physical

<assets>
</assets>

Question 5

Tailoring

Answer 5

Aligns controls with business security requirements. Includes assigning control values.

Question 6

Scoping

Answer 6

Part of Tailoring process where you review list of baseline security controls and select only those that apply to the IT systems in use. Scoping eliminates controls that don’t apply to business.