Which term covers any process or procedure that might affect one of the three tenets of information security?

• A. Operational
• B. Human
• C. Natural
• D. Auditing Control

Answer: (A)

Operational controls encompass the day-to-day procedures and processes that safeguard information systems, directly influencing confidentiality, integrity, or availability. This includes activities like change management, access provisioning, backup and recovery, incident response, and routine security workflows. Because these everyday actions shape how well CIA is preserved, they’re the best fit for the idea of any process or procedure that might affect one of the security tenets.

The other ideas don’t fit as the broad category: human refers to people and their training or behavior, natural to environmental factors, and auditing control describes monitoring and verification activities rather than the ongoing processes that impact CIA.