Lesson 01 - Group 3: Security Control Functional Types

What are the six security control functional types?

Preventive, detective, corrective, directive, deterrent, and compensating.

Preventive control

Physically or logically restricts unauthorized access and operates before an attack.

Detective control

Identifies attempted or successful intrusions and operates during an attack.

Corrective control

Responds to and fixes an incident, may prevent recurrence, and operates after an attack.

Directive control

Enforces a rule of behavior.

Deterrent control

Psychologically discourages intrusions.

Compensating control

Substitutes for a principal control that cannot be implemented and may support framework compliance.

Preventive, detective, and corrective timeline

Preventive controls operate before an attack, detective controls operate during an attack, and corrective controls operate after an attac