Which term describes security controls that are primarily implemented and executed by the information system through mechanisms contained in the hardware, software, or firmware components of the system?

• A. Technical Controls
• B. Administrative Controls
• C. Physical Controls
• D. Operational Controls

Answer: (A)

Technical controls are the security measures built into and executed by the information system itself through its hardware, software, or firmware. They operate automatically as part of the system’s operation, enforcing protections like encryption handled by the system, access control decisions made by the operating system, and firewall or intrusion prevention functions embedded in software or hardware. This distinguishes them from administrative controls (policies, procedures, training), physical controls (locks, barriers, cameras), and operational controls (the day-to-day processes that support security).