Which of the following is not an example of an operational control?
A.
backup and recovery
B.
audit trails
C.
contingency planning
D.
operations procedures
Explanation:
Audit Trails are under Operations Security Auditing opposed to Operations Security
Operations Controls.
“Operations Controls embody the day-to-day procedures used to protect computer operations. The
concepts of resource protection, hardware/software control, and privileged entity must be
understood by the CISSP candidate.” Pg. 311 Krutz: The CISSP Prep Guide: Gold Edition
check
0
0
So Audit Trails are not a day-to-day activity but Contingency Planning is ?
0
0