Directive Control

Updated 31 Jul 2026

•
def
- •
  a relatively weak control that directs a subject toward security compliance — "do this, please"
•
example
- •
  a company policy requiring all employees to follow a security guideline
- •
  storing all sensitive files in a protected folder, creating compliance policies/procedures, training users, a "Authorized Personnel Only" sign
•
related
- •
  Security Control Types
- •
  Managerial Control
•
cards
- •
  What does a directive control do, and give an example?
  - •
    Directs behavior via policy — e.g. requiring users to follow a security guideline (a relatively weak control)

Linked references 3