Which of the following is a preventive measure?

Which of the following is a preventive measure?

• A. A warning banner
• B. Audit trails
• C. An access control
• D. An alarm system

Answer: (C)

The correct answer identifies an access control as a preventive measure in information risk management. Access controls are essential components of security frameworks and play a vital role in safeguarding sensitive information systems. By restricting access to authorized users only, access controls prevent unauthorized individuals from accessing, modifying, or destroying critical data. This proactive step helps mitigate risks associated with data breaches and ensures that only those with the necessary permissions can perform specific actions within the system. Preventive measures aim to stop security incidents before they occur. Access controls can include mechanisms such as user authentication (passwords, biometrics, and smart cards), role-based access control (RBAC), and the principle of least privilege, which limits user permissions based on their job requirements. By effectively managing who has access to sensitive information, organizations can significantly reduce the likelihood of malicious activities. In contrast, measures like warning banners, audit trails, and alarm systems serve different purposes, such as informing users of policies, tracking user activities for compliance and forensic purposes, or alerting personnel to security breaches. While these measures contribute to an overall security posture, they do not proactively prevent unauthorized access or protect data in the same way that access controls do.

The correct answer identifies an access control as a preventive measure in information risk management. Access controls are essential components of security frameworks and play a vital role in safeguarding sensitive information systems. By restricting access to authorized users only, access controls prevent unauthorized individuals from accessing, modifying, or destroying critical data. This proactive step helps mitigate risks associated with data breaches and ensures that only those with the necessary permissions can perform specific actions within the system.

Preventive measures aim to stop security incidents before they occur. Access controls can include mechanisms such as user authentication (passwords, biometrics, and smart cards), role-based access control (RBAC), and the principle of least privilege, which limits user permissions based on their job requirements. By effectively managing who has access to sensitive information, organizations can significantly reduce the likelihood of malicious activities.

In contrast, measures like warning banners, audit trails, and alarm systems serve different purposes, such as informing users of policies, tracking user activities for compliance and forensic purposes, or alerting personnel to security breaches. While these measures contribute to an overall security posture, they do not proactively prevent unauthorized access or protect data in the same way that access controls do.