CH1

Question 1

Control plays a crucial role in minimizing vulnerabilities within an organization technical systems including computer networks, software, and data management.

Answer 1

Technical Control

Question 2

Type of controls policies, procedures and practices by management to guide and direct the activities of indviduals and teams.

Answer 2

Mangerial Controls

Question 3

This type of control revovles around the execution o fday to day activities and processes necessary for delivery goods and services. They involves managing operational procedures, ensuring adherence to quality standards, enhancing productivitiy and optimzing effiiciency.

Answer 3

Operational Controls

Question 4

Controls are a critical aspect of overall security focusing on the protetion of a orgstangable assets, facilities and resources.

Answer 4

Physical Controls

Question 5

Examples of Technical Controls

Answer 5

Performance Reviews, Risk Assesment

Question 6

Examples of Operational Controls

Answer 6

Incident response procedure, security awareness training, user access magagement

Question 7

Example of managerial controls

Answer 7

Perforamnce reviews, Risk assesment, code of conduct

Question 8

Control Type - These controls are designed to prevent problems or risks from occurign in the first place. They focus of eliminating o minimzing potential threats before they cause harm
Example - Firewalls

Answer 8

Preventive Controls

Question 9

Control type aim to discourage indivduals from engaging in undesirable behaviors or activities. They create a perception of risk or negative consequences to deter offenders
Example - Cameras, strong passwords

Answer 9

Deterrent Controls

Question 10

Control type implemented to ID and detect problems or risks which have already occured. Help to uncover issues or anomalies promptly to initate actions
Examples - SIEM

Answer 10

Detective Controls

Question 11

Control Type that is put in place to address a problem or risks after they have been ID’ed. Back up or recovery

Answer 11

Corrective Control

Question 12

Control Type where alternative measure implment when primary controls are not feasible of sufficient. Help offset the limitation or Deficinies of other controls.

Expample - Extra layer of security

Answer 12

Compensation Controls

Question 13

Control type that invovles providing spefici insturctions or guidleines to ensure compliance with policies, porceudres or regulations. They establish a clear framework for employees to follow

Answer 13

Directive Controls