Fundamentals of Communications and Networking, 3rd Edition

Network Security Controls

A network security control is something that mitigates risks, threats, or vulnerabilities. It can be a policy or procedure, a hardware asset, or a software asset. Think of a security control as something that mitigates risk. It’s not just about the hardware or software. It’s mostly about how the security control will mitigate the identified gap or risk exposure.

Using the seven domains of a typical IT infrastructure framework, the risk assessor can organize the identified gaps, risks, threats, and vulnerabilities. These items are found throughout the IT infrastructure and network. Security controls are safeguards to avoid, detect, counteract, or minimize security risks, threats, and vulnerabilities.

There are three ...