A security control is any safeguard designed to reduce risk, such as technical tools, policies, or procedures.
Why it matters:
- Controls are only effective if they actually stop or limit attacks.
- Poorly chosen controls often become security theater.
Pro tip: Evaluate controls by asking: What attack does this stop?
« Back to Glossary Index