There are three main security controls to implement in your organization. These include physical, technical, and administrative controls.
For Organizations that leverage Cloud service providers such as Amazon web services or Microsoft Azure, physical controls are implemented by the Cloud Service provider.
Technical security controls
Technical controls involve the use of various technologies to protect assets. These technologies include:
Intrusion detection and prevention systems (IDS and IPS)
Preventive security controls are the security measures that can stop unwanted activities from occurring. These include monitoring, risk assessments, layered security architecture, and much more.
Other types of security controls include: