Question

What are the two categories into which information security-related access controls fall? What are some examples of each?

Answer 1

The two categories of information security-related access controls are:

1. **Administrative Controls:**

- Examples: Security policies, employee training, and security awareness programs.

2. **Technical Controls:**

- Examples: Firewalls, encryption, access control lists (ACLs), and biometric authentication.

These categories work together to create a layered approach for effective information security.

Answer 2

Information security-related access controls fall into two categories: physical access controls and logical access controls.

Step-by-step explanation:

Categories of Information Security Access Controls

There are two categories of information security-related access controls:

1. Physical access controls: These controls focus on securing the physical environment and infrastructure. Examples include:

• Surveillance systems
• Secure doors and locks
• Biometric systems

Logical access controls: These controls protect the digital systems and networks. Examples include:

• Username and password authentication
• Two-factor authentication
• Firewalls