The company Midwest Insurance has taken many measures to protect its information. It uses an Information Security Management System, the input and output of data in applications is validated, confidential documents are sent in encrypted form and staff use tokens to access information systems. Which of these is not a technical measure?

A.
Information Security Management System

B.
The use of tokens to gain access to information systems

C.
Validation of input and output data in applications

D.
Encryption of information

Explanation:
Technical measures in automated environments are called IT security measures and are applied in the IT infrastructure
8.3 Logical access control
8.3.5 Granting access
Granting access to authorized users involves a number of steps which include identification of the user, authentication of this user and authorizing the user to access an asset. Identification is the first step in the process to granting access. In identification a person presents a token, for example an account number or username.

8.4 Security requirements for information systems
8.4.2. Validation of input and output data

8.5 Cryptography
The main reason to use cryptography is often seen as a means to keep information confidential