analyzes the risks, details and resources that need to be protected, and presents a clear path to protecting them
Security plan
are things like doors, locks and cameras or even the way rooms in a building are laid out.
Physical control
include human resource policies, classifying and limiting access to data and separating duties.
Administrative control
hightech equipment, these are things like intrusion detection systems, firewalls, anti-malware software.
Technical control