The modeling of the Security Master Plan will be finalized with the study of controls. In this stage, activities and necessary projects are indicat...

The modeling of the Security Master Plan will be finalized with the study of controls. In this stage, activities and necessary projects are indicated, as well as the temporal moment of these, considering the priority identified from the perception of the relevance of the business processes. Regarding the controls, what is correct to say?


a. Facility controls are only physical access controls to buildings.
b. Information system controls include methods that specify how an organization's computer and network resources should be operated for maximum security.
c. Facility controls are methods that protect an organization's computing and network facilities and their contents against loss or destruction.
d. Procedure controls are methods and devices that seek to ensure the accuracy, validity, and ownership of information system activities.
e. Information system controls include Authorization requirements, disaster recovery.