IT Auditing - Information Security Control

Question 1

Preventative control

Answer 1

Exists to prevent the threat from coming in contact with the weakness.

They are firewalls

Question 2

Compensating controls

Answer 2

Alternate controls as designed to accomplish the intent of the original controls as closely as possible. When original designed controls cannot be used due to limitations.

Question 3

Detective Controls

Answer 3

IDS is purely detective

Acts as a motion sensor

Question 4

NIST Framework

Answer 4

Used in execution of information security/Cybersecurity compliance audit

Question 5

ISO

Answer 5

Is a European Framework; replaces of COSO/COBIT