Which of the following is not an example of an operation control?

Which of the following is not an example of an operation control?

A.
backup and recovery

B.
audit trails

C.
contingency planning

D.
operations procedures

Explanation:
“Operation controls are the mechanisms and daily procedures that provide
protection for systems.”
When designing a protection scheme for resources, it is important to keep the following aspects or
elements of the IT infrastructure in mind:
Communication hardware/software
Boundary devices
Processing equipment
Password files
Application program libraries
Application source code
Vendor software
Operating System
System Utilities
Directories and address tables
Proprietary packages
Main storage

Removable storage
Sensitive/critical data
System logs/audit trails
Violation reports
Backup files and media
Sensitive forms and printouts
Isolated devices, such as printers and faxes
Telephone network”
Pg 406-407 Tittel: CISSP Study Guide