Which of the following is not a type of administrative control for information assurance and risk management?
A)Fostering company loyalty
B)Immediately revoking access privileges of dismissed,resigned,or transferred employees
C)Instituting separation of duties by dividing sensitive computer duties among as many employees as economically feasible
D)Performing authorization and authentication

Question

Quizplus · Accepted Answer

Authorization and authentication are technical controls, not administrative controls. Administrative controls involve policies and procedures, such as separation of duties and managing employee access.

Which of the Following Is Not a Type of Administrative