MANAGEMENT

Detailed explanation-1: -Defense in depth states that organizations should have overlapping security controls designed to meet the same security objectives whenever possible. This approach provides security in the event of a single control failure.

Detailed explanation-2: -Which of the following security programs is designed to provide employees with the knowledge they need to perform their specific work tasks. Security Training, is designed to provide employees with the specific knowledge they need to fulfill their job functions.

Detailed explanation-3: -Risk treatment measures can include avoiding, optimizing, transferring or retaining risk. The measures (i.e. security measurements) can be selected out of sets of security measurements that are used within the Information Security Management System (ISMS) of the organization.

Detailed explanation-4: -Preventative controls are designed to be implemented prior to a threat event and reduce and/or avoid the likelihood and potential impact of a successful threat event. Examples of preventative controls include policies, standards, processes, procedures, encryption, firewalls, and physical barriers.