Which control category most often includes encryption and access control systems?

Which control category most often includes encryption and access control systems?

• A. Technical controls
• B. Administrative controls
• C. Physical controls
• D. Procedural controls

Answer: (A)

These items focus on how security is enforced through technology. Encryption and access control systems operate through cryptographic functions and software/hardware that enforce who can access what, and under what conditions. Because they rely on digital mechanisms built into the systems themselves, they’re categorized as technical controls. Administrative controls deal with policies, procedures, and oversight; physical controls are tangible barriers like locks and guards; while procedural controls describe the steps or processes used. But encryption and access control are implemented and enforced by technology, which is why they belong to the technical category.

These items focus on how security is enforced through technology. Encryption and access control systems operate through cryptographic functions and software/hardware that enforce who can access what, and under what conditions. Because they rely on digital mechanisms built into the systems themselves, they’re categorized as technical controls. Administrative controls deal with policies, procedures, and oversight; physical controls are tangible barriers like locks and guards; while procedural controls describe the steps or processes used. But encryption and access control are implemented and enforced by technology, which is why they belong to the technical category.