Which of the following is not an example of an operational control?
A.
backup and recovery
B.
audit trails
C.
contingency planning
D.
operations procedures
Explanation:
Audit Trails are under Operations Security Auditing opposed to Operations Security Operations
Controls. “Operations Controls embody the day-to-day procedures used to protect computer
operations. The concepts of resource protection, hardware/software control, and privileged entity
must be understood by the CISSP candidate.” Pg. 311 Krutz: The CISSP Prep Guide: Gold Edition