Which of the following is NOT an example of an operational control?
Click on the arrows to vote for the correct answer
A. B. C. D.B.
Operational controls are controls over the hardware, the media used and the operators using these resources.
Operational controls are controls that are implemented and executed by people, they are most often procedures.
Backup and recovery, contingency planning and operations procedures are operational controls.
Auditing is considered an Administrative / detective control.However the actual auditing mechanisms in place on the systems would be consider operational controls.
Operational controls are administrative or procedural measures that are implemented to ensure that business operations are conducted in a secure, efficient, and effective manner. These controls can include a wide range of activities, from basic routines to more complex processes. Some examples of operational controls are:
A. Backup and Recovery: This control involves the creation and maintenance of backup copies of critical data and systems, and the ability to restore these systems in the event of a disruption or failure.
B. Auditing: This control involves the review and analysis of system activity logs and other records to detect and prevent security breaches or other unauthorized activities.
C. Contingency Planning: This control involves the development and implementation of procedures and protocols to ensure that critical systems and operations can continue in the event of a disruption or disaster.
D. Operations Procedures: This control involves the establishment and enforcement of standard procedures and protocols for performing routine tasks and managing daily operations.
Based on the given options, the answer to the question is option D, operations procedures. This is because operations procedures are an example of an administrative control rather than an operational control. Administrative controls are policies and procedures that are implemented to manage risk and ensure compliance with legal and regulatory requirements. These controls are typically designed to address specific risks or compliance obligations, rather than to support ongoing business operations.
In summary, while backup and recovery, auditing, and contingency planning are all examples of operational controls, operations procedures are not.