QUESTION: Jorge is putting a process in place to ensure that the organization reviews intrusion prevention system logs on a regular basis. What category of control is this?
- Operational
- Managerial
- Technical
- Compensating
Click To View The Answer
Correct Answer: A
Managerial controls are procedural mechanisms that focus on the mechanics of the risk management process. Technical controls enforce confidentiality, integrity, and availability in the digital space. Operational controls include the processes that we put in place to manage technology in a secure manner. While an intrusion prevention system is itself a technical control, reviewing intrusion prevention logs is an example of an operational control.