Security controls are safeguards or countermeasures designed to protect information systems and data from security threats. They are typically categorized into three main types:​

• Technical Controls: These involve the use of technology to protect systems and data, such as firewalls, encryption, and intrusion detection systems.​

• Administrative Controls: These are policies and procedures that govern the management of security, including user training, access control policies, and incident response plans.​

• Physical Controls: These encompass physical measures to prevent unauthorized access to facilities and equipment, such as locks, security guards, and surveillance cameras.​

Implementing a combination of these controls helps organizations maintain the confidentiality, integrity, and availability of their information systems.