2023 IT Examiner School

Internal Use Only

Types of Controls Administrative Controls support the classic management responsibilities of planning, directing, and organizing.

Physical Controls protect against environmental, human, and systemic threats.

Technical Controls involve hardware and application or OS software.

Internal Use Only

Control Types, Timing, and Layering

• Controls are categorized according to timing & nature • Importance of layered controls system • Strength of one control can compensate for weaknesses in or failure of another control