Cisco Cyber Security Practice Exam

What type of control is implemented when a warning banner is displayed about the negative outcomes of breaking company policy?

1. Preventive

2. Deterrent

3. Corrective

4. Compensating

The correct answer is: Deterrent

Displaying a warning banner about the negative outcomes of breaking company policy serves as a deterrent control. Deterrent controls are designed to discourage individuals from engaging in undesirable behaviors or actions by making them aware of the consequences. In this case, the warning banner informs employees of the potential negative repercussions they may face if they violate company policy, such as disciplinary actions or legal consequences. This awareness can influence their decisions and behavior, steering them away from actions that could jeopardize security or compliance. Preventive controls, on the other hand, are aimed at stopping a security incident before it occurs, such as firewalls or access controls. Corrective controls take action after an incident has occurred to restore systems or data to a previous state, while compensating controls provide an alternative means to meet security requirements when primary controls are not feasible. The purpose of the warning banner aligns specifically with the deterrent approach by promoting a culture of compliance and awareness rather than merely implementing barriers or remedies after the fact.