Which term describes the process of selecting the type and placement of security controls to ensure the goals of the CIA triad and compliance with any framework requirements?

Which term describes the process of selecting the type and placement of security controls to ensure the goals of the CIA triad and compliance with any framework requirements?

• A. Security governance
• B. Selection of effective controls
• C. Risk assessment
• D. Security architecture

Answer: (B)

The main idea here is turning security goals and framework requirements into concrete defenses and where to place them. Selecting effective controls is the act of choosing which security measures to apply and deciding their placement so they collectively protect confidentiality, integrity, and availability and satisfy any framework rules. This is the step that translates risk considerations and policy needs into actionable security architecture. Risk assessment identifies and prioritizes risks but doesn’t specify which controls to implement or where to put them. Security architecture describes the overall design and arrangement of controls across the system, but it’s the selection process that decides which controls are used and where they’re deployed to achieve the desired protections and compliance. Security governance covers policy, oversight, and management of the security program rather than the hands-on choice of controls.

The main idea here is turning security goals and framework requirements into concrete defenses and where to place them. Selecting effective controls is the act of choosing which security measures to apply and deciding their placement so they collectively protect confidentiality, integrity, and availability and satisfy any framework rules. This is the step that translates risk considerations and policy needs into actionable security architecture.

Risk assessment identifies and prioritizes risks but doesn’t specify which controls to implement or where to put them. Security architecture describes the overall design and arrangement of controls across the system, but it’s the selection process that decides which controls are used and where they’re deployed to achieve the desired protections and compliance. Security governance covers policy, oversight, and management of the security program rather than the hands-on choice of controls.