<aside>
<img src="/icons/lock_gray.svg" alt="/icons/lock_gray.svg" width="40px" /> Security controls refers to any type of safeguard of countermeasure used to avoid, detect, counteract or minimize security risks to physical property, information, computer systems or other assets
</aside>
Security Control Categories:
There are 4 Broad categories of security controls:
- Technical controls
- Technologies, hardware, and software mechanisms that are implemented to manage and reduce risks
- Managerial controls
- Sometimes also referred to as administrative controls
- Involve the strategic planning and governance side of security
- Operational controls
- Procedures and measures that are designed to protect data on a day-to-day basis
- Are mainly governed by internal processes and human actions
- Physical Controls
- Tangible, real-world measures taken to protect assets