Cybersecurity Fundamentals

Security Control Types and Functions

Classify controls by implementation and function, then combine preventive, detective, and recovery outcomes without assuming one safeguard is enough.

Beginner14 min read
Cybersecurity Fundamentals lessonCybersecurity foundationsPractice

UNTIMED COACHING

Practice before the pressure

Use feedback to correct the model, not merely memorize an option position.

GUIDED PRACTICE

Practice the lesson questions

Answer normal lesson questions without a timer. Every answer includes an explanation, and incorrect answers can be tried again before continuing.

CONCEPT MODELS

See the lesson as a system

Use these visual guides to connect the key ideas before answering the questions.

Connect the roles in Security Control Types and FunctionsKeep administrative controls, technical controls, physical controls, and detective function as separate roles.
Connect the roles in Security Control Types and FunctionsA topic-specific model connects four distinct roles used to reason about security control types and functions.
Approval workflowProcess assigns duties and authorization
Firewall accessTechnology enforces a defined access decision
Entry evidenceMonitored door provides status evidence
Detection signalAlert reveals suspicious or changed state
Verify Corrective and RecoveryConnect corrective and recovery with its topic-specific inspection, expected outcome, and safety boundary.
Verify Corrective and RecoveryA verification model for security control types and functions connects the final decision to evidence, outcome, and a protected boundary.
Recovery controlBackup restores a trusted service state
Starting checkInspect recovery control evidence
Expected resultVerify recovery control result
Safety boundaryProtect approval workflow state