Security Control

Any measure put in place to reduce risk or protect against threats. Security controls can be technical (like firewalls or encryption), administrative (policies and training), or physical (locks, security cameras). For example, requiring a password and a second authentication factor is a control to prevent unauthorized login.

‍

Small businesses often implement basic controls first (e.g. strong passwords, antivirus software) which drastically improve security. Think of controls as the safeguards or countermeasures that keep threats at bay or limit the damage if something goes wrong.