Studied by 0 people
Looks like no one added any tags here yet for you.
Technical Controls
controls implemented using systems (Ex. firewalls, anti-virus)
Managerial Controls
administrative controls associated with security design and implementation (Ex. Security policies)
operational controls
controls implemented by people instead of systems (Ex. Security guards, awareness programs)
Physical Controls
limit physical access (Ex. fences, locks, badge readers)
Preventive Control Type
block access to a resource (Ex. firewall rules, enabled door locks)
Deterrent Control Type
discourage an intrusion attempt (Ex. warning signs, front reception desk)
Detective Control Type
identify and log an intrusion attempt (Ex. motion detectors, patrol)
Corrective Control Type
aim to restore systems after an incident (Ex. backups, patch management)
Compensating Control Type
alternative measures that provide the same level of security when primary controls are not feasible. (Ex. firewall blocks a specific application instead of patching the app)
Directive Control Type
direct a subject towards security compliance (Ex. train users on proper security policy)
