Which category includes controls for system and data recovery?

Which category includes controls for system and data recovery?

• A. Technical or Procedural Controls
• B. Administrative Controls
• C. Physical Security Controls
• D. Compliance Controls

Answer: (A)

System and data recovery relies on safeguards that restore operations after an incident, implemented as technical safeguards and the procedures used to carry them out. Restoring systems and data depends on tools like backup software, offsite storage, and disaster recovery gear, plus the documented steps that tell responders exactly how to perform a restore, run a failover, or test recovery. This combination—the technology that preserves and restores data and the runbooks or recovery procedures—fits squarely in technical or procedural controls. Administrative controls cover policies, governance, and training, which shape how recovery is approached but don’t by themselves implement the restore capability. Physical security protects hardware and facilities, and compliance controls focus on meeting regulations. So, recovery capabilities are best described as technical or procedural controls.

System and data recovery relies on safeguards that restore operations after an incident, implemented as technical safeguards and the procedures used to carry them out. Restoring systems and data depends on tools like backup software, offsite storage, and disaster recovery gear, plus the documented steps that tell responders exactly how to perform a restore, run a failover, or test recovery. This combination—the technology that preserves and restores data and the runbooks or recovery procedures—fits squarely in technical or procedural controls. Administrative controls cover policies, governance, and training, which shape how recovery is approached but don’t by themselves implement the restore capability. Physical security protects hardware and facilities, and compliance controls focus on meeting regulations. So, recovery capabilities are best described as technical or procedural controls.