Skip to content

Technical Control

What is Technical Control?

A security control implemented through technology such as firewalls, encryption, access controls, and intrusion detection systems.

Information Security

Frameworks that govern technical control

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →CIS Controls v8View framework →

What the standards actually require on technical control

Requirements naming technical control across 6 standards, quoted from the control text.

SLSA5 controls

The organization must show continuous enforcement, through technical controls, of every claim it makes in source provenance or VSAs, and must document what each enforced control means: a custom control (such as a required workflow) needs its name, its purpose...

slsa::SO.4 · Continuous technical controls (Source L3 and L4) →
US NRC 10 CFR 73.54 - Cyber Security for Nuclear Power Plants1 control

Per 10 CFR 73.54 + NRC Regulatory Guide 5.71: defense-in-depth + access control + monitoring + boundary controls + integrity protection.

USNRCCYBER-4 · Defense-in-Depth and Technical Controls →
GAMP 5 - Good Automated Manufacturing Practice3 controls

Data governance is the arrangement of policies, ownership, roles, processes and technical controls that ensures regulated data is created, processed, reviewed, used, retained and disposed of with its integrity protected through its life cycle across all the sy...

gamp-5-good-automated-manufacturing-practice::6.1.8 · 6.1.8 Data Governance →
PCI DSS 4.03 controls

Public-facing web applications must be protected by an automated technical control that constantly spots and stops web-based attacks and that, at minimum: is placed ahead of the public-facing web applications and configured to find and block web-based attacks;...

6.4.2 · 6.4.2 Automated web attack detection and prevention →
CIS Controls v8.12 controls

Apply technical controls such as application allowlisting so that only authorised software can run or be reached, and reassess the allowlist at least twice a year. Implementation Groups: IG2 and IG3 (not in the IG1 baseline; applies from IG2 upward).

cis-controls-v8-1::2.5 · Allowlist Authorized Software →
FFIEC Cybersecurity Assessment Tool (CAT)2 controls

Technical controls keep unauthorised devices, including rogue wireless access points and removable media, off the internal networks.

ffiec-cybersecurity-assessment-tool-cat::D3.PC.Im.E.3 · D3.PC.Im.E.3 Infrastructure Management (Evolving 3) →

Questions people ask about technical control

What is Technical Control?
A security control implemented through technology such as firewalls, encryption, access controls, and intrusion detection systems.
Why is Technical Control important for compliance?
Technical Control is a key concept in Information Security. Understanding technical control helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Technical Control?
Technical Control appears in the requirement text of SLSA, US NRC 10 CFR 73.54 - Cyber Security for Nuclear Power Plants, GAMP 5 - Good Automated Manufacturing Practice, PCI DSS 4.0, CIS Controls v8.1. Across these standards we have identified 16 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Technical Control?
Explore our compliance framework pages to see how technical control applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Technical Control applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.