Security Control Categories

Question 1

What is a Security Control?

Answer 1

Measures, safeguards, or procedures which are put into place to protect our IT infrastructure.

Question 2

Do some security controls fall under multiple categories?

Answer 2

Yes

Question 3

What are the characteristics of Technical Security Controls?

Answer 3

Typically something that is implemented in hardware or software

Technical = Logical

-Encryption
-Antivirus
-Firewall
-IDS/IPS

Question 4

What are the characteristics of Administrative Security Controls?

Answer 4

Policies, Procedures, Guidelines, Strategic Measures

Managerial = Administrative

-Policy
-Procedures
-IRP (Incident Response Plan)
-BCP (Business Continuity Plan)
-Data Classification

Question 5

What are the characteristics of Physical Security Controls?

Answer 5

Guns, Guards, Gates

-Fences
-Cameras
-Gates
-Guards

Question 6

What is an Operational Security Control?

Answer 6

Any security procedure carried out by a person