Security Controls

administrative controls that are typically documented in an organization's security policy and focus on managing risk. {risk assessments + vulnerability assessments}

operational controls implemented by people that help ensure that the day-to-day operations of an organizations comply with the security policy. {awareness and training + configuration management + media protection + physical and environmental protection}

use technology such as hardware, software, and firmware to reduce vulnerabilities

controls that are meant to prevent security incidents. This is done through:
hardening: modifies basic config to increase security
training: makes users aware of vulnerabilities so they are less likely to be tricked security guards
change management: ensures admin makes changes by submitting it to a process
account disablement policy: user accounts are disabled when employee leaves
intrusion prevention system (IPS): block malicious traffic before it reaches a network

detect when vulnerabilities have been exploited
1. Log monitoring
2. Security information and event management systems (SIEM)- detect trends and raise alerts
3. Security audit
4. Video surveillance
5. Motion Detection
6. Intrusion Detection System

attempt to reverse the impact of an incident or problem after it has occurred
1. backups and system recovery
2. Incident handling processes

attempt to discourage a threat
1. cable locks
2. physical locks

alternative controls to be used instead of a primary control

controls you can physically touch such as mantraps, fences, sensors, and locks

designed to prepare for a security incident and respond to them once they occur.
1. creating security policy
2. training personnel