Which of the following is not an example of an operational control?

A.
backup and recovery

B.
audit trails

C.
contingency planning

D.
operations procedures

Explanation:
Audit Trails are under Operations Security Auditing opposed to Operations Security Operations
Controls. “Operations Controls embody the day-to-day procedures used to protect computer
operations. The concepts of resource protection, hardware/software control, and privileged entity
must be understood by the CISSP candidate.” Pg. 311 Krutz: The CISSP Prep Guide: Gold Edition