Controls are safeguards or the measures that are put into place to protect against a specific risk or threat. Organizations deploy controls to protect physical and business assets from various threats and mitigate risks. CCS provides a Controls Studio that lets you manage controls, map controls to assessment data, policies, and create new regulations and controls.
Following are a few examples of controls:
Employees must be trained and prepared to notify the management in case of accidental data loss or a malicious attack
Apply latest security patch every week.
Enforce a strong password.
Data must be encrypted when transmitting over a public network.