Selecting Infrastructure Controls

Question 1

What is Control?

Answer 1

A protective measure put in place to reduce potential risks and safeguard an organization’s assets

Question 2

What is Least Privilege?

Answer 2

Users and systems should have only necessary access rights to reduce the attack surface

Question 3

What is Defense in Depth?

Answer 3

Utilize multiple layers of security to ensure robust protection even if one control fails

Question 4

What is a Risk-based Approach?

Answer 4

Prioritize controls based on potential risks and vulnerabilities specific to the infrastructure

Question 5

What is Lifecycle Mangement?

Answer 5

Regularly review, update, and retire controls to adapt to the evolving threat landscape

Question 6

What is an Open Design Principle?

Answer 6

Ensure transparency and accountability through rigorous testing and scrutiny of controls