Of the seven types of Access Control Categories, which is described as such?
Designed to specify rules of acceptable behavior in the organization.
Example: Policy stating that employees may not spend time on social media websites

A.
Directive Access Control

B.
Deterrent Access Control

C.
Preventive Access Control

D.
Detective Access Control

Explanation:
A directive access control is deployed to direct the actions of subject to encourage compliance with security
policies.Policies stating rules of acceptable behavior in the organization are directives. Therefore, they are known as
Directive Access Controls.
Incorrect Answers:
B: Deterrent Access Controls are intended to discourage a potential attacker. This is not what is described in
the question.
C: Preventive Access Controls are intended to prevent an incident from occurring. This is not what is described
in the question.
D: Detective Access Controls help identify an incident’s activities and potentially an intruder. This is not what is
described in the question.