CISM: Certified Information Security ManagerDemo

Question

Which of the following is MOST helpful for determining whether information security policies have been followed?

A Corrective controls
B Directive controls
C Detective controls
D Preventive controls

Explanation

Detective controls identify and alert on security events, policy violations, and other noncompliant activity, making them the appropriate control type for determining whether information security policies were followed.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ1013

Community Discussion