Categories and Types of Security Controls

Types of Security Control Categories

• Managerial

• Technical

• Operational

• Physical

Managerial

• Admin Controls (Making policies)

  • Making rules for security

  • Password Management

Technical

• Hardware/Software to protect confidentiality

  • Encryption, Firewall, Antivirus

Operational

• Procedural Controls (Executing Policies)

  • Daily Backups, MFA

Physical

• Physical safety

  • Security Guards

  • Biometrics

Control Types

• Strategies to setup control categories

Preventive

• Prevent security issues before they occur

Detective

• Alert when security breach occurs

Corrective

• Repairing systems after the fact an issue occurs

Deterrent

• Discourage attacks visible controls

  • Locks, Guards, Video Surveillance, Sign

Compensation

• Alternative measures to provide better protection against

  • Review access logs, Double Check

    • (MAIN SECURITY IS NOT GOOD ENOUGH)

Directive

• Dictating behavior & actions to enhance security

  • Security Policies, Practices, Guides