0% found this document useful (0 votes)
7 views

IT Control Classification

The document outlines IT control classifications for risk management, categorizing controls into administrative, technical, and physical types. It lists various controls such as firewalls, change management, and security cameras, organized by their purpose: preventive, detective, and corrective. The information is aimed at enhancing security measures within IT environments.
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
7 views

IT Control Classification

The document outlines IT control classifications for risk management, categorizing controls into administrative, technical, and physical types. It lists various controls such as firewalls, change management, and security cameras, organized by their purpose: preventive, detective, and corrective. The information is aimed at enhancing security measures within IT environments.
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 1

IT Control Classification

ForIT RiskManagement
Administrative
Type Technical Physical
/Managerial /Directive
• Firewalls • Change Management • Fences
• Antivirus • Quality Assurance • Locks
• Endpoint Detection and • Segregation of Duties • Man Trap for Entry
Response (EDR) • Job Rotation Doors
• Extended Detection and • Security Awareness • Fire Suppression
Preventive Response (XDR) Training
• Email Gateway • Safety Training
• Intrusion Prevention
System (IPS) and Web
Application Firewall
(WAF)
• System Login Banner • Security Awareness • Fences
• Monitoring Tools • Policies and Standards • Security Cameras
Deterrent • Exit Interview • Warning Banners
• Non-Disclosure
Agreement
• SIEM Solution • Audit • Motion Sensors
• Intrusion Detection • Security Review • Laser Beam
Detective • Vulnerability Scanners • Mandatory Leaves • Video Cameras
• Quality Control • Smoke Detectors
• Security Alarm System
• Backup and Recovery • Incident Response Plan • Fire Suppression
• Network Isolation • Disaster Recovery Plan
Corrective

Towshin Sharier, CISA


@towshinst

You might also like