ISOISO 27001Security ControlsEASYFree question
How should the effectiveness of security controls be measured?
- A.Through regular testing, monitoring, and evaluation of whether controls achieve their intended security objectives
- B.Through the number of policies published, training sessions delivered, and procedures signed off by their process owners
- C.By the volume of firewall rules, user accounts, and log entries held in the repository
- D.By comparing annual spend with industry averages, vendor quotes, and budget forecasts
Why A is correct
Control effectiveness is measured through regular testing, monitoring, and evaluation to determine whether controls achieve their intended security objectives.
Know someone studying for ISO 27001? Send them this one.