Preventive Control
What is Preventive Control?
A security control designed to stop a security incident or policy violation from occurring in the first place, such as access controls or input validation.
Frameworks that govern preventive control
What the standards actually require on preventive control
Requirements naming preventive control across 5 standards, quoted from the control text.
Identify preventive controls and develop recovery strategies per NIST SP 800-34 Rev 1 Section 3.3 (Identify Preventive Controls) + Section 3.4 (Create Contingency Strategies).
NISTSP34-3 · Preventive Controls and Recovery Strategies: Backup, Alternate Sites, Equipment →The planned assurance initiative is carried out to validate and confirm how the operating internal controls are designed and, in internal audit assignments in particular, to weigh their cost-effectiveness: the understanding and scope of what is being assured a...
cobit-2019::MEA04.06 · MEA04.06 Execute the assurance initiative, focusing on design effectiveness →The privacy framework runs as business as usual with metrics showing how its controls meet its objectives: clear collection and intent-of-use notices throughout the lifecycle with consent aligned to regulation and withdrawable;
edm-council-cdmc-cloud-data-management-capability-framework::4.2.2 · 4.2.2 The Data Privacy framework is operational →Each control in the impact-level Appendix A template has a control requirement, a control summary information table and an implementation statement.
fedramp-rev-5::P.5 · P.5 Documenting controls in SSP Appendix A →The FI must ensure every administrative account on any operating system, database, application, security appliance or network device is secured to prevent unauthorised access or use.
monetary-authority-of-singapore-technology-risk-management-guidelines::CHN.4.1 · Notice on Cyber Hygiene 4.1: secure every administrative account →Questions people ask about preventive control
What is Preventive Control?
Why is Preventive Control important for compliance?
Which compliance frameworks address Preventive Control?
Where can I learn more about Preventive Control?
See how Preventive Control applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.