Certified Information Systems Auditor (CISA) — Question 549

Which type of control is being implemented when a biometric access device is installed at the entrance to a facility?

Answer options

Correct answer: A

Explanation

The installation of a biometric access device serves as a preventive control by restricting unauthorized access to the facility. While deterrent controls aim to discourage potential intruders, preventive controls actively stop them from gaining entry. Corrective and detective controls relate to responding to or identifying incidents after they occur, rather than preventing them beforehand.