ISC2 Certified in Cybersecurity (CC)Security OperationsMedium
A multinational corporation is expanding its operations into a new region. Before deploying new IT infrastructure, they must ensure that the environmental conditions of the new data center, such as temperature, humidity, and fire suppression systems, meet strict operational and security standards. Which security operations domain element is primarily concerned with these requirements?
- APersonnel security
- BAsset management
- CPhysical security
- DEnvironmental controls
Show answer & explanationAnswer & explanation
Correct answer: D. Environmental controls
Environmental controls specifically address the physical conditions (temperature, humidity, fire, power) necessary to protect IT equipment and ensure continuous operation within a facility.
Why the other options are wrong
- A. Personnel security focuses on screening and managing employees, unrelated to data center conditions.
- B. Asset management tracks inventory, not the environmental conditions of its operating location.
- C. Physical security broadly covers protecting physical assets from unauthorized access, but 'environmental controls' is the more specific domain for conditions like temperature and humidity.
Environmental Controls
Measures implemented to manage and maintain suitable environmental conditions (temperature, humidity, power, fire safety) for IT infrastructure.
- Protects hardware from damage.
- Ensures continuous operation.
- Includes HVAC, fire suppression, power conditioning.
Memory trick: Keep the server cool, dry, and fire-free.