1
Q
True or False: Directive controls are policies and procedures
A
TRUE - they direct/guide behavior
2
Q
What does AUP stand for and what type of control is it?
A
Acceptable Use Policy - it’s a DIRECTIVE control (tells people how to behave)
3
Q
Is MFA a Directive control?
A
NO - MFA is TECHNICAL (computer-enforced), not Directive
4
Q
Name 2 examples of Directive controls
A
1) AUP (Acceptable Use Policy) 2) IRP (Incident Response Plan)
