Which statement best describes the role of cybersecurity controls?

### Why this is right Controls are safeguards used to reduce risk and protect information and systems. Their selection should respond to assessed risks and organizational requirements. ### The concept Controls can be technical, administrative, or physical. Examples include firewalls, policies and training, and secure physical access. Controls reduce risk but do not guarantee that every attack will be prevented, so their performance should be monitored and reviewed. ### The other options - **B. They guarantee that attacks cannot occur**: controls reduce risk but cannot promise that attacks are impossible. - **C. They are limited to physical locks and restricted rooms**: technical and administrative controls are also used. - **D. They replace the need to assess organizational risk**: risk assessment helps determine which controls are appropriate. ### Remember Controls reduce risk; they do not eliminate the need for assessment or review.