Managerial, The control gives oversight of the information system. Examples could include risk identification or a tool allowing the evaluation and selection of other security controls., Operational, The control is implemented primarily by people. For example, security guards and training programs are operational controls., Technical, the control is implemented as a system (hardware, software, or firmware). For example, firewalls, antivirus software, and OS access control models are technical controls., Physical, Controls such as alarms, gateways, locks, lighting, and security cameras that deter and detect access to premises and hardware are often placed in a separate category from technical controls.

Security Control Categories

โดย
สั่งพิมพ์
ฝัง

ลีดเดอร์บอร์ด

สไตล์ภาพ

ตัวเลือก

สลับแม่แบบ

คืนค่าการบันทึกอัตโนมัติ: ใช่ไหม