Which of the following is not an example of an operation control?

A.
backup and recovery

B.
audit trails

C.
contingency planning

D.
operations procedures

Explanation:
“Operation controls are the mechanisms and daily procedures that provide
protection for systems.”
When designing a protection scheme for resources, it is important to keep the following aspects or
elements of the IT infrastructure in mind:
Communication hardware/software
Boundary devices
Processing equipment
Password files
Application program libraries
Application source code
Vendor software
Operating System
System Utilities
Directories and address tables
Proprietary packages
Main storage

Removable storage
Sensitive/critical data
System logs/audit trails
Violation reports
Backup files and media
Sensitive forms and printouts
Isolated devices, such as printers and faxes
Telephone network”
Pg 406-407 Tittel: CISSP Study Guide