Which item is NOT a core component of the described base security framework?

• A. Prevention
• B. Public relations
• C. Detection
• D. Effective response

Answer: (B)

This question tests understanding of the foundational security operations trio: prevention, detection, and effective response. Prevention aims to stop threats before they cause harm, using controls like access management, patching, and secure configurations. Detection involves monitoring and alerts to identify incidents as they occur or have already started. Effective response covers containment, eradication, recovery, and learning from the incident to reduce impact and prevent recurrence. Public relations, while important for messaging and stakeholder communication during and after an incident, does not constitute a security capability that prevents, detects, or directly handles the incident itself. It’s not part of the security operations framework, so it’s not a core component of the described base framework.