public:99_annexes:annex-b-terms-and-definitions:s:security_control

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
public:99_annexes:annex-b-terms-and-definitions:s:security_control [2026/09/12 17:42] – ↷ Page moved from private:99_annexes:annex-b-terms-and-definitions:s:security_control to public:99_annexes:annex-b-terms-and-definitions:s:security_control nick_didopublic:99_annexes:annex-b-terms-and-definitions:s:security_control [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido
Line 1: Line 1:
 ====== Security Control ====== ====== Security Control ======
  
-[[private:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]]+[[public:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]]
  
 ===== Discussion ===== ===== Discussion =====
Line 7: Line 7:
 A Security Control constitutes a measure applied to manage a security risk. A Security Control constitutes a measure applied to manage a security risk.
  
-A Security Control addresses one or more security objectives, including [[private:99_annexes:annex-b-terms-and-definitions:c:confidentiality|Confidentiality]], [[private:99_annexes:annex-b-terms-and-definitions:i:integrity|Integrity]], availability, [[private:99_annexes:annex-b-terms-and-definitions:a:authentication|Authentication]], authorization, accountability, and non-repudiation.+A Security Control addresses one or more security objectives, including [[public:99_annexes:annex-b-terms-and-definitions:c:confidentiality|Confidentiality]], [[public:99_annexes:annex-b-terms-and-definitions:i:integrity|Integrity]], availability, [[public:99_annexes:annex-b-terms-and-definitions:a:authentication|Authentication]], authorization, accountability, and non-repudiation.
  
-Security Controls include administrative, managerial, operational, physical, procedural, and technical measures. A policy, assigned responsibility, approval procedure, facility restriction, encryption mechanism, [[private:99_annexes:annex-b-terms-and-definitions:a:access_control|Access Control]], monitoring process, or audit record serves as a Security Control when it manages an identified security risk.+Security Controls include administrative, managerial, operational, physical, procedural, and technical measures. A policy, assigned responsibility, approval procedure, facility restriction, encryption mechanism, [[public:99_annexes:annex-b-terms-and-definitions:a:access_control|Access Control]], monitoring process, or audit record serves as a Security Control when it manages an identified security risk.
  
 A Security Control remains distinct from a security objective. A security objective identifies a desired security outcome. A Security Control provides a measure used to achieve or preserve that outcome. A Security Control remains distinct from a security objective. A security objective identifies a desired security outcome. A Security Control provides a measure used to achieve or preserve that outcome.
Line 35: Line 35:
 ===== Example ===== ===== Example =====
  
-A Test Environment applies encryption, Access Control, credential rotation, audit logging, and protected secret storage as Security Controls for [[private:99_annexes:annex-b-terms-and-definitions:s:sensitive_configuration_value|Sensitive Configuration Values]].+A Test Environment applies encryption, Access Control, credential rotation, audit logging, and protected secret storage as Security Controls for [[public:99_annexes:annex-b-terms-and-definitions:s:sensitive_configuration_value|Sensitive Configuration Values]].
  
 ---- ----
  • public/99_annexes/annex-b-terms-and-definitions/s/security_control.1789260167.txt.gz
  • Last modified: 2026/09/12 17:42
  • by nick_dido