Certified Chief Information Security Officer (CCISO) — Question 182

The regular review of a firewall ruleset is considered a _______________________.

Answer options

• A. Procedural control
• B. Organization control
• C. Management control
• D. Technical control

Correct answer: A

Explanation

The correct answer is A, as procedural controls involve established processes and procedures to manage and maintain security measures like firewall rules. Options B, C, and D refer to different types of controls that do not specifically pertain to the routine review of firewall policies.