
96
CYBerseCurItY For InDustrIAL ControL sYsteMs
controls should implement the policy established by business or man-
agement controls and would be created by either operational teams or
subject matter experts for use by operational teams.
A technical control deals with hardware and software-based security
safeguards. ese devices and applications will be managed using the
operational controls, which are in turn designed to map to the top-level
management controls. A technical control could consist of a rewall,
intrusion detection application within the network, antivirus software
on a server, or many other elements. Technical controls can be