Protective measures such as access control, malware protection, audit, availability, confidentiality, integrity, cryptography, identification, and authentication are described under which security requirement?

Protective measures such as access control, malware protection, audit, availability, confidentiality, integrity, cryptography, identification, and authentication are described under which security requirement?

• A. Procedural Security Requirements
• B. Assurance Security Requirements
• C. Safeguard Security Requirements
• D. Discipline Security Requirements

Answer: (B)

Think of security requirements as ways to ensure trust in how a system is protected. The measures listed—access control, malware protection, audit, availability, confidentiality, integrity, cryptography, identification, and authentication—are the concrete controls and mechanisms that enforce protection and demonstrate that protection to be reliable. That focus on proving and maintaining security through these safeguards is what the category called Assurance Security Requirements is all about. It covers the protections that give you confidence the system preserves CIA properties (confidentiality, integrity, availability) and uses tools like authentication, encryption, and auditing to enforce them. Procedural Security Requirements relate to policies and processes rather than the protective controls themselves. Safeguard Security Requirements would focus on the actual controls rather than the assurance about their effectiveness. Discipline Security Requirements isn’t a standard category here. So, the best fit is Assurance Security Requirements because it encapsulates the protective measures that provide reliable security and trust in the system.

Think of security requirements as ways to ensure trust in how a system is protected. The measures listed—access control, malware protection, audit, availability, confidentiality, integrity, cryptography, identification, and authentication—are the concrete controls and mechanisms that enforce protection and demonstrate that protection to be reliable. That focus on proving and maintaining security through these safeguards is what the category called Assurance Security Requirements is all about. It covers the protections that give you confidence the system preserves CIA properties (confidentiality, integrity, availability) and uses tools like authentication, encryption, and auditing to enforce them.

Procedural Security Requirements relate to policies and processes rather than the protective controls themselves. Safeguard Security Requirements would focus on the actual controls rather than the assurance about their effectiveness. Discipline Security Requirements isn’t a standard category here. So, the best fit is Assurance Security Requirements because it encapsulates the protective measures that provide reliable security and trust in the system.