Another way to look at insurance in the context of the question would be in terms of what causes it: risk tranfer. <br><br>Risk transfer does not address the ante but just the post of an event/incident. Moreover, the risk is still there with the insurer. To this end I can't see how insurance could be defined as preventive controls since it does not reduce the risk and does not stop the incident from happening.<br>
<br>In case - I did found a number of references that classify insurance as a compensatory control.<br>
<br>Andrea<br><br><div class="gmail_quote">On Tue, Oct 6, 2009 at 9:55 PM, Andrea Gatta <span dir="ltr"><<a href="mailto:andrea.gatta@gmail.com">andrea.gatta@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Just thinking loud - a preventive control avoids in part (mitigation) or altogether an incident from happening.<br><br>In the context of the question 'audit logs' is the only control which is clearly not preventative in nature.<br>
<br>it's a quite a long shot but a recovery control - 'insurance' in this case - although not preventative in nature actually shares with preventative controls the focus on complete or partial reduction of the damage so that it will be as 'it has never happened'.<br>
<br>In the context of the question 'insurance' is clearly a distractor which introduces that uncertainty that usually causes me to 'overthink' big time something that otherwise would be straightforward. <br>
<br><br>Andrea<br><br><div class="gmail_quote"><div><div></div><div class="h5">On Tue, Oct 6, 2009 at 6:09 PM, Holland, Brandon <span dir="ltr"><<a href="mailto:hollandb@frmaint.com" target="_blank">hollandb@frmaint.com</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div><div></div><div class="h5">
<div>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Transcender:</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Which measure is NOT considered to be preventative in nature?</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Insurance</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Fire suppression systems</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Redundant</font></span><span lang="en-us"> <font face="Calibri">comm</font></span><span lang="en-us"><font face="Calibri">unication links</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Audit Logs</font></span><span lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Ok, so I understand Audit Logs are NOT preventative</font></span><span lang="en-us"><font face="Calibri">…</font></span><span lang="en-us"><font face="Calibri"> but how is insurance</font></span><span lang="en-us"><font face="Calibri"> considered preventative?</font></span><span lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"></span><span lang="en-us"></span><span lang="en-us"><font face="Calibri">Brandon Holland</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Army Fleet Support</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">ITS | Network Services</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Ph: 598-0626</font></span></p>
<p dir="LTR"><span lang="en-us"></span></p>
</div>
<br></div></div>_______________________________________________<br>
cisspstudy mailing list<br>
<a href="mailto:cisspstudy@cccure.org" target="_blank">cisspstudy@cccure.org</a><br>
<a href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target="_blank">http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</a><br>
<br></blockquote></div><br>
</blockquote></div><br>