A security control category implemented as a system (hardware, software, or firmware) such as firewalls, antivirus, OS access controls?

A security control category implemented as a system (hardware, software, or firmware) such as firewalls, antivirus, OS access controls?

• A. Operational
• B. Managerial
• C. Operational
• D. Technical

Answer: (A)

Technical controls are safeguards built into technology—hardware, software, or firmware—that enforce security policy automatically. Firewalls regulate network traffic, antivirus programs detect and block malware, and OS access controls control who can do what on a system. These controls rely on automated mechanisms and configuration within the technology itself, rather than on people following procedures or on governance activities. Managerial controls cover governance, risk management, and policy oversight, while operational controls involve day-to-day processes, physical security, and training. Because the examples are implemented as systems that enforce security through technology, they belong to the technical controls category.

Technical controls are safeguards built into technology—hardware, software, or firmware—that enforce security policy automatically. Firewalls regulate network traffic, antivirus programs detect and block malware, and OS access controls control who can do what on a system. These controls rely on automated mechanisms and configuration within the technology itself, rather than on people following procedures or on governance activities. Managerial controls cover governance, risk management, and policy oversight, while operational controls involve day-to-day processes, physical security, and training. Because the examples are implemented as systems that enforce security through technology, they belong to the technical controls category.