Which term describes governance, accountability, protecting important files, monitoring detection, and backup?

Which term describes governance, accountability, protecting important files, monitoring detection, and backup?

• A. Cyber Security Control
• B. Governance and Compliance Processes
• C. Cyber Risks
• D. Employee Training

Answer: (A)

Cyber security controls are the measures put in place to protect information systems and the data they hold. They cover not only the protective and technical actions (like protecting important files and backing them up) but also the governance and accountability framework that assigns roles and sets policies for how those protections are implemented and maintained. Monitoring and detection are part of these controls, providing real-time or near-real-time insight into potential incidents so they can be addressed quickly. The combination of governance, accountability, data protection, monitoring, and backups together defines the set of controls used to manage cyber risk. Why this is the best fit: it captures both the oversight structures and the practical protective actions, including data protection and continuity mechanisms, that together reduce cyber risk. The other options focus more narrowly: governance and compliance processes emphasize rules and oversight but not the actual protective measures; cyber risks refer to the threats themselves rather than the protective actions; employee training is important but only one element and doesn’t cover the broader protective controls like backups and monitoring.

Cyber security controls are the measures put in place to protect information systems and the data they hold. They cover not only the protective and technical actions (like protecting important files and backing them up) but also the governance and accountability framework that assigns roles and sets policies for how those protections are implemented and maintained. Monitoring and detection are part of these controls, providing real-time or near-real-time insight into potential incidents so they can be addressed quickly. The combination of governance, accountability, data protection, monitoring, and backups together defines the set of controls used to manage cyber risk.

Why this is the best fit: it captures both the oversight structures and the practical protective actions, including data protection and continuity mechanisms, that together reduce cyber risk. The other options focus more narrowly: governance and compliance processes emphasize rules and oversight but not the actual protective measures; cyber risks refer to the threats themselves rather than the protective actions; employee training is important but only one element and doesn’t cover the broader protective controls like backups and monitoring.