1. Security Controls

Security Controls

A control is a safeguard or countermeasure used to protect data and systems. Its main purpose is to preserve confidentiality, integrity, and availability (CIA).

CIA Triad

Confidentiality means keeping information private, integrity means keeping information accurate and unchanged unless properly modified, and availability means ensuring information and systems are accessible when needed.

Access Control

Access control limits which subjects (users or processes) can access which objects (data, files, or resources) based on defined rules.

Firewall as a Control

A firewall is a security control that helps block unauthorized access from outside the system. It can also help prevent sensitive internal information from leaving the network and being accessed by unauthorized people.

Simple Meaning

Security controls are protections that help keep data private, accurate, and available while restricting improper access.