Physical Controls and Their Monitoring

Physical Controls

Subdomain 1.4 names physical controls as one of the three control categories. A physical control protects a facility, room, or piece of hardware. The outline names the category but not specific devices, so study the category: a physical control is the right answer when the scenario's threat is someone entering or touching equipment.

Source: ISC2 CC Exam Outline effective September 1, 2026 (v01/2026), subdomain 1.4, https://www.isc2.org/certifications/cc/cc-certification-exam-outline, checked 2026-10-22.

Monitoring Matters

Subdomain 5.2 names logging and monitoring security events. A physical control produces evidence only when someone reviews it. A scenario in which a control fired but nobody acted on it is a monitoring problem, not a control design problem. Choose the answer that makes the event reviewed and acted on.

What the Outline Lists for This Section

The outline names these items. Be able to explain each one in plain language and apply it to a short scenario:

• 1.4: Technical controls
• 1.4: Administrative controls
• 1.4: Physical controls
• 5.2: Logging and monitoring security events
• 5.2: Security event triage (e.g., incident use cases, prioritization, correlation)
• 5.2: Threat actors (e.g., types, motivations)
• 5.2: Cyber threat intelligence
• 5.2: Threat frameworks

Common Traps

A common trap is choosing a control by its name rather than its category. Classify the control by what it is made of, then match it to the threat the scenario describes.