CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ39

VerifiedSecure Software Concepts

To support the review or design of security controls, controls can be classified using several criteria. One such criterion is their nature. Under this criterion, which control consists of incident-response processes, management oversight, security awareness, and training?

Explanation

Procedural controls are administrative and operational measures implemented through policies, processes, oversight, awareness, and training. Incident-response processes and management oversight are procedural activities, as are security-awareness and training programs.

Community Discussion

No comments yet. Be the first to start the discussion!