Controls are
A) Safeguards used to minimize the impact of threats
B) Capabilities, intentions and attack methods of adversaries to cause harm to assets
C) Resource or information that is to be protected
D) Weaknesses in an information system that can lead to a compromise of an asset

Question

Quizplus · Accepted Answer

Controls are measures or safeguards used to minimize or eliminate the impact of potential threats to an information system or asset. They can help to reduce the risks associated with vulnerabilities or weaknesses in the system to protect resources or information. Controls can be administrative, physical, or technical measures that aim to protect the confidentiality, integrity, and availability of assets. B refers to the threat actor, C refers to the resource, and D refers to vulnerabilities, which are not the same as controls.

Controls Are