Preventive Controls - Controlling, Contemporary Management Video Lecture | Contemporary Management - B Com

now these are broken down and you're
gonna have to not only understand the
combinations of like preventative
administrative preventive physical but
you're going to have to know examples
and what I found when I teach this is
people will see these examples and
they're you know the read about slides
or read mmm book and they're like yeah
that's simple that's no big deal
and but what you have to realize is it
you know you're gonna get a question on
just one of them pulled out when they're
all listed when all the controls are
listed and with the headline it makes a
lot of sense but if you get one of those
pulled out is it actually a recovery
control is it a detective control is an
administrative is it physical so don't
just blow that off you really need to
pay attention because you're going to
get some questions that could be tricky
about concepts that are actually pretty
easy so some examples of preventative
administrative would be policies you
develop policies so you're trying to
prevent people from doing the wrong
thing you're providing direction for the
actual overall security program in the
environment the hiring practices you're
trying to prevent from getting bad
people in security awareness you're
trying to prevent from the users not
doing what they're supposed to
separation of duties now how do you
think separation of duties is a
preventive control well separation of
duties means that you take one task
that's critical to the company and you
split it up and not just one person
carry out this critical task so what
you're trying to do is you're trying to
prevent fraud that's you take a critical
task you split it up so that one person
can't carry out fraudulent activity and
no one else knows about it you're
actually going to see separation of
duties a few times in the different
domains because it's hit pretty hard on
the exam but it's also becoming much
more important within the industry
so prevent a physical trying to prevent
something bad we have physical controls
for that like I said to remove the
cd-rom so somebody can't steal sensitive
data locking the computer's fences locks
man traps a lot of those things we're
actually going to talk about when we go
into the physical security domain and
technical these again aren't too
difficult you're trying to prevent
something for you by using technical
controls smart cards so somebody has to
authenticate before they can access a
callback systems which means that if
your remote you're calling in to an
access server and it will drop the line
and call you back to make sure you are
who you say you are it's part of the
authentication