Using 4 examples, differentiate between detective and administrative policies as part of organiional cyber security steps
Administrative security controls refer to policies, procedures, or guidelines that define personnel or business practices in accordance with the organization’s security goals. Examples of administrative controls are management controls and operational controls
Detective security controls are designed to detect a threat event while it is occurring and provide assistance during investigations and audits after the event has occurred. Examples of detective controls include security event log monitoring, host and network intrusion detection of threat events, and antivirus identification of malicious code
Comments
Leave a comment