Security controls in a data center are being reviewed to ensure data is properly protected and that human life considerations are included. Which of the following best describes how the controls should be set up?

Safety controls, such as fire suppression systems or emergency exits, should fail open. This means that in the event of a system failure, the default state allows for the safest possible outcome, prioritizing human life. For example, a fire door failing open allows people to escape, rather than trapping them. Remote access points and logical security controls (like authentication systems) should generally fail closed. This prevents unauthorized access if the system malfunctions, maintaining security. Logging controls should ideally fail closed or continue to log even if the primary system fails, to ensure an audit trail is maintained. Failing open for logging could mean losing critical security event data.