Which of the following is NOT typically used to categorize types of security safeguards?

• A. complacent safeguards
• B. administrative safeguards
• C. physical safeguards
• D. technical safeguards

Answer: (A)

Security safeguards are typically grouped into three categories: administrative safeguards, physical safeguards, and technical safeguards. The option that isn’t a standard category is complacent safeguards. Complacent describes a mindset or attitude toward security, not a formal type of safeguard. Administrative safeguards cover policies, procedures, workforce training, and security management; physical safeguards cover protection of facilities and equipment; technical safeguards cover the technology that controls access and protects data (like access controls, authentication, encryption, and audit controls). Because complacent safeguards isn’t a recognized category, it isn’t used to classify security safeguards.