Control
What is Control?
A measure (policy, procedure, technical mechanism, or physical safeguard) that modifies risk. Controls can prevent, detect, or correct security incidents.
Related terms
Frameworks that govern control
What the standards actually require on control
Requirements naming control across 6 standards, quoted from the control text.
Route remote accesses through authorized and managed network access control points.
NIST800-AC-17(3) · AC-17(3) Remote Access | Managed Access Control Points →Production data used in a test environment is protected as it would be in production, or synthetic data is generated instead, the test environment is made similar or identical to production including configurations and data sets so that testing finds flaws, an...
ffiec-it-examination-handbook::DAM-VII.B.2(a) · VII.B.2(a) Data Controls in the Testing Environment (Development, Acquisition, and Maintenance) →Microsoft’s vulnerable driver blocklist is implemented. Required at Maturity Level Three of the Application control mitigation strategy (Appendix C); ISM control ISM-1659 in ASD's Essential Eight to ISM mapping (December 2023).
acsc-essential-eight::E8-APP-ISM-1659 · Application control (ISM-1659): Microsoft’s vulnerable driver blocklist is implemented →The CISO should be accountable for controlling the budget for information security.
new-zealand-information-security-manual-nzism::3.2.15.C.01 · 3.2.15.C.01 CISO controls information security budget →Anyone who manages or controls a workplace and plans to give up that role must pass the asbestos register, in copy, to whoever is taking over management or control, if there is such a person.
victoria-occupational-health-and-safety-regulations-2017::r230 · r 230 Hand over the asbestos register when relinquishing management or control →Access to program source code is restricted. As an Annex A reference control it is compared with the controls chosen in risk treatment (6.1.3 c) and recorded in the Statement of Applicability, included with a reason and an implementation status or excluded wit...
iso-27001-2013::A.9.4.5 · Access control to program source code →Questions people ask about control
What is Control?
Why is Control important for compliance?
What concepts are related to Control?
Which compliance frameworks address Control?
Where can I learn more about Control?
See how Control applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.