What are the three main ways in which security can be provided?


Editorial team Published on

Security is commonly provided through three primary categories of security controls: management, operational, and physical.

1. Management Security (Administrative Controls)

  • Definition: The governance foundation and overall design that sets rules and guidelines.
  • Key functions: Risk assessment, security policies, compliance auditing, and employee training.

2. Operational Security (Technical Controls)

  • Definition: Day-to-day implementation and technical execution used to protect systems and networks.
  • Key functions: Access controls, multi-factor authentication (MFA), firewalls, and data encryption.

3. Physical Security

  • Definition: Tangible measures designed to protect physical facilities, equipment, and personnel.
  • Key functions: Biometric scanners, security guards, surveillance cameras (CCTV), and perimeter fencing.