ISC Updated CC Exam Questions and Answers by safwan

Segregation of duties ensures no single individual can propose, approve, and implement changes alone, reducing fraud and errors.

Privacy focuses on individual rights over personal information, distinct from confidentiality which focuses on access control.

Disaster Recovery Planning focuses specifically on restoring IT infrastructure, systems, and communications.

Type 1 authentication refers tosomething you know, such as passwords or PINs. While widely used, this authentication method has several inherent weaknesses. Users may share credentials intentionally or unintentionally, reuse weak passwords across systems, or forget them altogether. Passwords can also be intercepted through phishing, keylogging, shoulder surfing, or man-in-the-middle attacks.

Because of these weaknesses, Type 1 authentication alone provides limited security assurance. Modern security frameworks strongly recommend supplementing knowledge-based authentication with additional factors, such as something you have (tokens) or something you are (biometrics), to form Multi-Factor Authentication (MFA).