CSSLP: Certified Secure Software Lifecycle ProfessionalDemo

By ISC · Question Mode

QuestionQ39

Secure Software Concepts

To support the review or design of security controls, controls can be classified using several criteria. One such criterion is their nature. Under this criterion, which control consists of incident-response processes, management oversight, security awareness, and training?

  • A Compliance control
  • B Physical control
  • C Procedural control
  • D Technical control
Explanation

Procedural controls are administrative and operational measures implemented through policies, processes, oversight, awareness, and training. Incident-response processes and management oversight are procedural activities, as are security-awareness and training programs.

Community Discussion

No comments yet. Be the first to start the discussion!