The Role of Controls

The mechanisms that protect organizations from security threats represent a collection of controls, a number of which you have learned about. These controls fit into one of three key areas: administrative, physical, and technical. Each type of control is designed to protect one or more resources in specific ways as part of a comprehensive security solution.

Technical, administrative, and physical controls work together to provide a layered approach to security, also known as defense in depth. This is the key detail: The controls work together to ensure that security is maintained. Defense in depth enhances security by layering security measures, as in the design of a castle. A castle has moats, walls, gates, archers, knights, ...

Get Ethical Hacking: Techniques, Tools, and Countermeasures, 4th Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.