Câu 21: Lead Implementer: PECB Certified ISO/IEC 27001 Lead Implementer

The IT Department of a financial institution decided to implement preventive controls to avoid potential security breaches. Therefore, they separated the development, testing, and operating equipment, secured their offices, and used cryptographic keys. However, they are seeking further measures to enhance their security and minimize the risk of security breaches. Which of the following controls would help the IT Department achieve this objective?

1. A. Alarms to detect risks related to heat, smoke, fire, or water
2. B. Change all passwords of all systems
3. C. An access control software to restrict access to sensitive files — đáp án hiện tại