What are controls?

Cybersecurity controls can be technical, administrative, or physical and are designed to reduce vulnerabilities, prevent threats and ensure confidentiality, integrity and availability of information.

The most common types of controls are:

• Technical controls. These include firewalls, encryption, access controls and intrusion detection systems.
• Administrative controls. These encompass policies, procedures, training and incident response plans.
• Physical controls. These involve locks, security guards, surveillance cameras and facility access restrictions.