PECB Lead Implementer (ISO/IEC 27001) — Question 89

A tech company has implemented a security measure to confirm the secure removal or overwriting of sensitive data and licensed software on equipment before disposal or reuse. What type of security control was implemented?

Answer options

• A. Physical control
• B. Technological control
• C. Organizational control

Correct answer: A

Explanation

The correct answer is A, Physical control, as it involves tangible measures taken to protect and manage physical assets. The other options, Technological control and Organizational control, refer to measures that are more focused on software solutions and policies rather than the physical handling of equipment.