ISC2 Certified in Cybersecurity (CC)Security OperationsEasy
A small e-commerce business is experiencing frequent disruptions to its online store during peak shopping hours. Investigations reveal that the server room, located in a repurposed storage closet, often overheats, causing equipment to shut down. Which of the following security operations concepts is MOST directly relevant to resolving this issue?
- AThird-Party Risk Management
- BVulnerability Scanning
- CEnvironmental Controls
- DData Handling
Show answer & explanationAnswer & explanation
Correct answer: C. Environmental Controls
The issue described is overheating equipment in a server room, which is a direct concern of environmental controls. These controls ensure the physical conditions, like temperature and humidity, are suitable for IT infrastructure.
Why the other options are wrong
- A. Third-party risk management deals with risks introduced by external vendors or partners, which is unrelated to internal server room overheating.
- B. Vulnerability scanning identifies software or configuration weaknesses, not physical environmental issues.
- D. Data handling pertains to how data is stored, processed, and transmitted, not the physical environment of the servers.
Environmental Controls
Measures implemented to manage and maintain the physical environmental conditions (e.g., temperature, humidity, power) necessary for the proper operation and protection of IT equipment.
- Protect against environmental threats like heat, cold, water, and dust.
- Essential for data center and server room integrity.
- Includes HVAC, fire suppression, and power regulation.
Memory trick: Environment controls the room's temperature, like a thermostat for your tech.