Security Control Categories
- •
def
- •
the 4 categories that classify security controls by what kind of control they are
- •
- •
categories (mnemonic: STOMP — Technical, Operational, Managerial, Physical)
- •
- •
- •
- •
Physical — a control that is itself a physical asset (e.g., a locked door, a fence); see Physical Security for the specific physical controls used in practice
- •
note
- •
the exam does not require distinguishing whether a given control is a "category" (this page) or a "type" (see Security Control Types) — some controls could arguably be filed under either, but exam questions avoid that ambiguity
- •
- •
- •