Security Controls Flashcards

Implemented using technology/systems. Examples: firewalls, antivirus, OS controls. Operates automatically.

Administrative controls — security policies, SOPs, compliance requirements. Governs how security is designed and implemented.

Implemented by people, not systems. Security guards, awareness training, security patrols.

Limits physical access. Guard shacks, fences, locks, badge readers.

Blocks access before it happens. "You shall not pass." Firewall rules, locked doors, ID checks.

Discourages intrusion attempts. Does NOT directly prevent access. Warning signs, splash screens, visible guards.

Identifies and logs an intrusion. May not prevent access — finds the issue. Log reviews, motion detectors, SIEM.

Applied AFTER detection to reverse or minimize impact. Backup restoration, incident response, fire extinguisher.

Alternative when primary control is insufficient or not yet in place. May be temporary. Firewall blocking unpatched app.

Guides behavior toward compliance. Weakest type. "Authorized Personnel Only" sign, training, policies.

Compensating control — requires two people for sensitive tasks to prevent fraud or abuse of privilege.

Layering multiple controls so no single failure leads to a breach. Combines categories and types of controls.

Technical + Preventive. Blocks unauthorized traffic before it reaches systems.

Operational. Type varies: Deterrent (visible presence), Preventive (blocks access), Detective (spots intruders).

Physical + Detective. Detects movement in an area and triggers an alert.

Technical + Corrective. Applied after an incident (e.g. ransomware) to restore normal operation.