Generally Mitigating Threats

Question 1

Alarm systems, locks, surveillance cameras, identification cards, and
security guards

Answer 1

Physical Controls

Question 2

Smart cards, encryption, access control lists (ACLs), intrusion detection
systems, and network authentication

Answer 2

Technical Controls

Question 3

Policies, procedures, security awareness training, contingency planning,
and disaster recovery plans
▪ User training is the most cost-effective security control to use

Answer 3

Administrative Controls