Question

A manufacturing company has strong preventive technical controls, including firewalls, network segmentation, and endpoint protection. However, a recent tabletop exercise revealed that a simulated attacker who bypassed the perimeter operated undetected for weeks. Which type of control should the information security manager prioritize adding to address this specific gap?

Accepted Answer

Detective controls such as security event monitoring and anomaly detection capabilities

Answer

Additional preventive controls such as stricter access control lists on internal segments

Answer

Administrative controls such as an updated acceptable use policy for employees

Answer

Physical controls such as enhanced badge access to the data center