S+ SY0701 1.1 - Security Controls

What are Technical Controls and give an example?

Controls we implement using some type of technical systems such as, OS, Firewalls, Anti Virus, and other types of software. For example, if you’re managing an OS system you set up policies/procedures within the OS that would allow/disallow different functions from occurring.

What are Managerial Controls and give examples?

Basically series of policies that explain to people the best way to manage their computers & data or their other systems. They are often inserted into security policies, and they are also often implemented into day-to-day processes as part of your SOP.

What are Operational Controls and give examples?

Controls implemented by people not technology, examples include security guards, and awareness programs to educate people on best practices for IT security such as meetings and posters.

What are Physical Controls and give examples?

Controls that would limit someone’s physical access to a building/room/device, and examples of these controls can be physical perimeter fencing, guard shacks, door locks, keycard access.

What are the 6 different control types?

Preventive, Deterrent, Detective, Corrective, Compensating, Directive

What are ‘preventive’ control types?

Control type that limits someone’s access to a particular resource. What are examples,