Which operational control covers protecting facilities and environmental conditions?

• A. Physical and Environmental Protection
• B. Personnel Security
• C. Systems and Information
• D. Maintenance

Answer: (A)

Physical and Environmental Protection controls cover safeguarding facilities and environmental conditions that support the safe, reliable operation of information assets. This area includes securing buildings and data centers, managing access to reduce physical risk, and maintaining environmental factors such as temperature, humidity, fire suppression, water intrusion detection, and power reliability. By addressing these physical and environmental risks, it helps prevent damage to hardware, interruptions to service, and opportunities for tampering, which are essential for protecting the people, processes, and technology involved. In contrast, other options focus on who is allowed to access assets (personnel security), the protection of the information and systems themselves (systems and information), or the ongoing upkeep of equipment and software (maintenance), which do not directly address protecting facilities and their environment.