Security Control Categories + Gap Analysis

Gap Analysis

During a ___, the cybersecurity professional reviews the control objectives for a particular organization, system, or service and then examines the controls designed to achieve those objectives

Technical controls

enforce CIA in the digital space. Examples include firewall rules, access control lists, intrusion prevention systems, and encryption

Operational Controls

include the processes that we put in place to manage technology in a secure manner. These include user access reviews, log monitoring, and vulnerability management

Managerial controls

are procedural mechanisms that focus on the mechanics of the risk management process

Physical controls

are security controls that impact the physical world