Security controls

Security controls or security measures are safeguards or countermeasures to avoid, detect, counteract, or minimize security risks to physical property, information, computer systems, or other assets. In the field of information security, such controls protect the confidentiality, integrity and availability of information.

Systems of controls can be referred to as frameworks or standards. Frameworks can enable an organization to manage security controls across different types of assets with consistency.

Security controls reduce the likelihood of any impacts of security incidents and protect the CIA triad for systems and data. Protecting the CIA triad helps organizations meet their responsibilities through consistent risk management of systems, assets, data, networks and physical infrastructures.