A technology or procedure to mitigate vulnerabilities and risk to ensure CIA of information is called?

A technology or procedure to mitigate vulnerabilities and risk to ensure CIA of information is called?

• A. Access control
• B. Encryption
• C. Identity management
• D. Security control

Answer: (D)

Mitigating vulnerabilities and risk to preserve the CIA of information is achieved through security controls—the safeguards put in place to prevent, detect, or correct security issues. Security controls cover a range of measures, including technical solutions, administrative policies, and physical protections, all designed to uphold confidentiality, integrity, and availability. For example, encryption protects confidentiality, access control restricts who can reach resources, and identity management handles who is who and what they’re allowed to do. While those are important concepts themselves, they are specific controls or approaches; the overarching term that encompasses all of them as technologies or procedures used to reduce risk is security control.

Mitigating vulnerabilities and risk to preserve the CIA of information is achieved through security controls—the safeguards put in place to prevent, detect, or correct security issues. Security controls cover a range of measures, including technical solutions, administrative policies, and physical protections, all designed to uphold confidentiality, integrity, and availability. For example, encryption protects confidentiality, access control restricts who can reach resources, and identity management handles who is who and what they’re allowed to do. While those are important concepts themselves, they are specific controls or approaches; the overarching term that encompasses all of them as technologies or procedures used to reduce risk is security control.