Security Controls

Security controls are safeguards or countermeasures typically prescribed for an information and information systems of an organization established to protect the confidentiality, integrity and availability (CIA) of its assets and meet its defined security requirements. Moreover, security controls refer to a broad range of controls specifically designed to help organizations protect their data and IT infrastructure, and further prevent cyberattacks from different internal and external security threats.

Security controls are safeguards that companies and individuals mainly use to avoid, detect, prevent, recover from or at least minimize security risks to their valuable assets. Moreover, security controls ensure that only authorized entities are allowed to access resources and unauthorized users are denied from gaining access to valuable assets. In addition, it mitigates and prevents a wide variety of information security risks such as malware, ransomware, phishing, social engineering, data loss, data breach, and DDoS/DoS attacks.

There are three major categories of security controls that cybersecurity professionals should be familiar with, namely technical controls, administrative controls and physical controls. In order to protect and secure organizational assets from cyberattacks or security incidents, security folks should deeply understand each types of these security controls.

• Administrative Controls: these security controls are policies and procedures that organizations define to protect their valuable assets based on security policies and regulatory requirements. Examples include: policies, data classification and labeling mechanisms, procedures, hiring and terminating practices, backup policies, background checks, security awareness and training programs, review, reports, work supervision, testing, personnel security controls. These categories of security controls are sometimes called management controls.
• Technical Controls: these technical security controls involve the hardware or software technologies used to manage access and protect organizational IT resources and systems. Examples include: encryption, access control lists (ACL), intrusion detection systems/ intrusion prevention systems (IDS/IPS), firewalls, routers, security information and event management (SIEM) and related technologies.
• Physical Controls: security controls concerned with providing protection to the facility and physical objects of the organization. Examples include: perimeter fencing, access control cards such as guards, guard dogs, locks, lights, smartcard and tokens, video surveillance systems (VSS), intrusion detection sensors, swipe cards, biometric access controls, and alarms. These security control types are sometimes referred to as operational controls.

Organizations could apply the following major granular security controls besides to the three security control categories described earlier:

• Preventative: security control deployed to stop unauthorized activity from happening to information and information systems. Examples include: firewalls, encryption, access controls, etc.
• Detective: security control deployed to discover and identify malicious activities just after the fact of occurring. Examples include: CCTV, IDS, job rotation, audit trails, etc.
• Deterrent: security control that discourages intruders from violating security policies. Example include: policies, security awareness training, locks fences, guards, etc.
• Corrective: security control that enhances the environment to return systems and services to normal situation after unauthorized activity has happened. Examples include: Backup and restore systems, intrusion prevention systems (IPS), virus removal, etc.
• Recovery: security controls that try to restore resources, services and functionalities after a security policy violation occurs. Example include: backup and restore systems, server clustering, antimalware systems, database shadowing, imaging and snapshotting, etc.
• Directive: security control established to direct and control the actions of entities to enforce compliance with security policies. Examples include: Acceptable use policy (AUP), notifications, exit signs, etc.
• Compensating: security control established to deliver different alternatives to existing security controls to support in security policies enforcement endeavors. Example include: disaster recovery plan (DRP) for failed fire prevention and suppression systems, backup systems for deleted files, etc.

HP Elite Desktop PC Computer | Intel Quad-Core i5 | 8GB Ram | 1TB HDD | 24 Inch LCD Monitor (1080p HDMI), RGB Keyboard + Mouse | Desk Speakers | WiFi + Bluetooth | Windows 10 (Renewed)

(738)

11% Off $156.00 $139.00 (as of 07/07/2024 16:40 GMT -04:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

[INTEL POWERED MULTI-TASKING] - Built with a quad-core Intel i5 processor and 8GB of DDR3 RAM; Perfect as a home office computer, remote learning, or media center [LATEST WIRELESS TECH] - This HP Desktop Computer easily connects to the internet throu... read more

Hiearcool USB C Hub, USB C Multi-Port Adapter for MacBook Pro, 7IN1 USB C to HDMI Hub Dongle Compatible for USB C Laptops and Other Type C Devices (4K HDMI USB3.0 SD/TF Card Reader 100W PD)

(48391)

8% Off $24.99 $22.99 (as of 07/07/2024 16:54 GMT -04:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

UL/SGS Approved Hiearcool USB C Hub: The intelligent USB C Adapter has perfectly combined all the functions you need. USB C to HDMI hub equipped with USB3.0 x2, 4K@30 HDMI, SD/TF Card Adapter, and Up to 100W/20V/5A Type C Power Delivery charging port... read more

Laptop Cleaning Kit Keyboard Cleaner, Keyboard Cleaning Kit Electronics Cleaning Tool for MacBook iPad Phone iPhone Pro, Brush Tool for Tablet, Computer, PC, TV Camera Lens Computer Vacuum Keyboard

(2067)

$16.98 (as of 07/07/2024 17:06 GMT -04:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

DEEP CLEAN YOUR DEVICE The electronics cleaner kit can effectively deep clean all your electronic devices such as mobile phones, tablets, TVs, etc. It comes with retractable large keyboard brush, polishing cleaning cloth X 2, keycap puller, metal pen... read more

PC Gaming Headset Headphone Hook Holder Hanger Mount, Headphones Stand with Adjustable & Rotating Arm Clamp, Under Desk Design, Universal Fit, Built in Cable Clip Organizer EURPMASK

(27367)

$12.99 (as of 07/07/2024 16:54 GMT -04:00 - More infoProduct prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on [relevant Amazon Site(s), as applicable] at the time of purchase will apply to the purchase of this product.)

🎧【Clamp-on Headphone Stand】The E-Hold Series headphone holder fits desks from 0.31 inch to 1.57 inch thick, making it a versatile choice for most setups. The spring clamp is a breeze to remove and reattach. No glue, no mess. It blends seamlessly into... read more