Evaluating Real Threats: SSCP Exam Answer

C.

Detective/physical controls usually require a human to evaluate the input from sensors or cameras to determine if a real threat exists.

Source: KRUTZ, Ronald L.

& VINES, Russel.

D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 36.

The controls that require a human to evaluate the input from sensors or cameras to determine if a real threat exists are associated with Detective/physical controls.

Detective controls are designed to detect and respond to security incidents after they occur. Physical controls, on the other hand, are designed to physically restrict access to a facility or asset.

In this scenario, the use of sensors or cameras is a technical control that is used to detect potential security incidents. However, these controls alone cannot determine if a real threat exists. A human must evaluate the input from the sensors or cameras and make a determination as to whether or not a real threat exists. This evaluation process is a physical control because it involves a human being physically evaluating the input.

Therefore, the correct answer is C. Detective/physical.