Security Controls
What is Security Controls?
Safeguards or countermeasures designed to protect the confidentiality, integrity, and availability of information systems and data. Controls can be technical (encryption, firewalls), administrative (policies, training), or physical (locks, cameras).
Terms that appear alongside security controls
Each of these is named in at least one of the same controls as security controls. The number is how many controls name both.
- information security 16 shared controls
- nist 15 shared controls
- cybersecurity 15 shared controls
- audit 14 shared controls
- access control 12 shared controls
- encryption 11 shared controls
- integrity 11 shared controls
- compliance 11 shared controls
Frameworks that govern security controls
What the standards actually require on security controls
Requirements naming security controls across 6 standards, quoted from the control text.
Any computing device, whether owned by the company or by an employee, that connects both to untrusted networks (the internet included) and to the CDE must have security controls where: (a) specific configuration settings are defined to stop threats entering th...
1.5.1 · 1.5.1 Security controls on dual-connected devices →The State ensures that an authority at each airport serving civil aviation is responsible for coordinating the implementation of security controls.
icao-annex-17-aviation-security-avsec::3.2.2 · 3.2.2 Airport authority coordinating security controls →Security controls are applied to back-end systems to minimise the risk of insider attack (Table C1, threats 1.1 and 3.1: abuse of privileges by staff).
unece-wp-29-r155::A5-M1 · Annex 5 M1 Security controls on back-end systems to minimise the risk of insider attack →The project obtains the authorizer's approval to proceed to high-level design with the tailored system security controls, as part of requirements-phase gating.
canada-itsg-33-it-security-risk-management::A2-3.4.4 · 3.4.4 Approve system security controls →Provide [Assignment: organization-defined personnel or roles] with initial and [Assignment: organization-defined frequency] training in the employment and operation of physical security controls.
NIST800-AT-3(2) · AT-3(2) Role-based Training | Physical Security Controls →Appropriate security controls are enabled for sensitive data, and for every sensitive data item the catalog holds evidence of those controls; the sensitivity level determines the required encryption, obfuscation and data loss prevention.
edm-council-cdmc-cloud-data-management-capability-framework::KC9 · Key Control 9: Security Controls →Questions people ask about security controls
What is Security Controls?
Why is Security Controls important for compliance?
Which compliance frameworks address Security Controls?
Where can I learn more about Security Controls?
See how Security Controls applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.