Sec+ Domains 1-5

Front

1.1 CAT: technical

Back

Enforces CIA - Apples to the configurations of networking systems.

Ex> Firewall rules, IPS/IDS, Encryption.

Front

1.1 CAT: Managerial

Back

Applies to oversight in terms of risk management mechanisms.

Example > risk assessments, security planning exercises.

Front

1.1 CAT: operational

Back

Applies with day to day function, making sure the mission is carrying out.

Example > Log monitoring, data backups, vulnerability management.

Front

1. 1.1 CAT: physical

Back

Applies to physical security for facilities/assets.

Example > Building locks, perimeter lighting, fences, burglar alarms, fire suppression systems.

Front

1.1 CONTROL TYPE: Preventative

Back

The goal is to prevent an exploit from happening, hence the name.

Example > Firewall and Encryption

Front

1.1 CONTROL TYPE: Deterrent

Back

The goal is to sway the threat actor from carrying out an attack.

Example > Vicious guard dogs, bright flood lights, barbed wire fences, those laser-filled rooms you see in spy movies….

Front

1.1 CONTROL TYPE: Detective

Back

The goal is to detect when an event/incident is/has happened.

Example > Intrusion Detection System spots malware activity on a network and alerts the admin.

Front

1.1 CONTROL TYPE: Corrective

Back

The goal is to make corrective actions or restore from an attack.

Example > Restoring to data backups after a ransomeware attack.

Front

1.1 CONTROL TYPE: Compensating

Back

The goal is to mitigate risk associated with exceptions made to a policy.

Example > If Multi-factor Auth.. is not currently mandated on the network, maybe we can COMPENSATE by adding stricter password policies.

Front

1.1 CONTROL TYPE: Directive

Back

The goal is to inform employees and others what they should do achieve security objectives.

Example > Policies, SOP (standard Operating Procedure), or a STIG mandated from DISA.