Security controls 1.1

Question 1

Technical controls.

Answer 1

Controls that are operated using systems. Firewalls, Antivirus.

Question 2

Managerial controls.

Answer 2

Administrative controls associated with security design & implementation. Security polices & standard operating procedures (SOP).

Question 3

Operational controls

Answer 3

Use people for these. Security guards, Awareness programs,

Question 4

Physical controls

Answer 4

Limiting physical access. guard shack, fences, badge readers

Question 5

Preventive controls

Answer 5

Block access to a resource. Firewall rules, follow security policy, guard shack checks identifications, door locks on.

Question 6

Deterrent controls.

Answer 6

Gives someone trying to access a resource second though or trouble. Splash screens, threat of demotion, posted warning signs, front reception desk.

Question 7

Detective control

Answer 7

Identifies and logs an intrusion attempt. May not prevent access. Reviews system logs, enable motion detectors, review login reports.

Question 8

Corrective control

Answer 8

Applies after an event has occurred. Can sometimes reverse the effect of the event. Continue operating with minimal downtime. Correct the problem by restoring backups that can mitigate a ransomware infection, create policies for security issues, contact law enforcement or use a fire extinguisher.

Question 9

Compensating control

Answer 9

Control using other means for security event. Can be use don temp basis to resolve. Prevent the exploitation of a weakness. Firewall blocks an application instead of patching it. implement separation of duties, require simultaneous guard duties, generator used after power outage.

Question 10

Directive control type

Answer 10

Relatively weak control cause your directing someone toward security compliance. Store all sensitive files in a protected folder, create compliance policy and procedures, train users on correct policy, makes “authorized users only” sign.

Question 11

how are security controls managed?

Answer 11

There are many categories of control some that some companies will combine. New control types are created. Each org will use different controls.