Controls are put into place to reduce the risk an organization faces, and they come in three main flavors: administrative, technical, and physical.
Administrative controls are commonly referred to as “soft controls” because they are more management oriented. Examples of administrative controls are security documentation, risk management, personnel security, and training.
Technical controls (also called logical controls) are software or hardware components, as in firewalls, IDS, encryption, and identification
and authentication mechanisms.
Physical controls are items put into place to protect facility, personnel, and resources. Examples of physical controls are security guards, locks, fencing, and lighting.
Continue reading Security Controls Types and Functionalities