Service Providers: IA, Program Security, Personnel Security, Document Controls (or CM), HR, Finance, etc

Operational Security (Execution of Policies, Standards & Process, Education & Awareness)

Policies, Standards, Processes, Procedures, & GuidelinesĪdministrative Entities: Executive-Level, Mid.-Level Management Recovery Controls: The act to restore access controls to protect organization’s information asset Preventive Controls: Physical, administrative, and technical measures intended to prevent unauthorized access to organization’s information assetĭetective Controls: Practices, processes, and tools that identify and possibly react to unauthorized access to information assetĬorrective Controls: Physical, administrative, and technical countermeasures designed to react to security incident(s) to reduce or eliminate the opportunity for the unwanted event to recur CISSP Exam - Categories of security controls andĭirective Controls: Policy and standard that advise employees of the expected behavior for protecting an organization’s information asset from unauthorized access

Csp 3d models