Certified in Risk and Information Systems Control (CRISC) — Question 1304

Which of the following controls is an example of non-technical controls?

Answer options

• A. Access control
• B. Physical security
• C. Intrusion detection system
• D. Encryption

Correct answer: B

Explanation

The correct answer is B, Physical security, as it involves measures to protect physical assets without relying on technology. The other options, such as Access control, Intrusion detection system, and Encryption, are all technical controls that involve the use of technology to safeguard information systems.