1.0 General Security Concepts

Technical controls

Controls implemented using technical systems such as firewalls and antivirus software.

Managerial controls

Controls that involve policies and procedures for managing security effectively.

Operational controls

Controls that use personnel to enforce security measures, such as security guards and awareness programs.

Physical controls

Controls designed to limit physical access to buildings, rooms, or devices.

Preventive control type

A control that limits access to resources to prevent security breaches, such as a firewall rule.

Deterrent control type

A control that discourages a potential attacker, such as security warning signs.

Detective control type

A control that identifies and warns us of security breaches, such as reviewing system logs.

Corrective control type

A control that addresses an incident after detection, such as restoring data from a backup.

Compensating control type

A temporary control that serves as a substitute while a permanent solution is implemented, such as using a generator during a power outage.

Directive control type

A weak control that directs users to follow certain security practices, such as compliance training.