Preventive Controls
Proactive measures implemented to thwart potential security threats or breaches.
Deterrent Controls
Discourage potential attackers by making the effort seem less appealing or more challenging.
Detective Controls
Monitor and alert organizations to malicious activities as they occur or shortly thereafter
Corrective Controls
Mitigate any potential damage and restore our systems to their normal state.
Compensating Controls
Alternative measures that are implemented when primary security controls are not feasible or effective.
Directive Controls
● Guide, inform, or mandate actions
● Often rooted in policy or documentation and set the standards for behavior within an organization.