Day 3: Understanding Security Controls & Cyber Fundamentals


HELLO FRIENDS

WELCOME TO MY CYPHERLOG

Today I have learned about security control actually it is used to safeguard the CIA triad we have seen in last blog, it's like the security guard who protects the building by checking the Id's of the visitors to let them in. Both acts same, it have tools, rules and actions to reduce risk of attack in systems. 
It have three main categories in types of control and five main functions in what the control does.

Ok let's see how these security control works 

The three categories of controls are Administrative controls, Technical controls and Physical controls

Let's start with Administrative controls

    Actually it's a concept of company's have policies, procedures and guidelines. And it's very important to have this much rules because of tons of threats around the world. To get it clearly here is an example 
Company always checks background status of employees whom they hiring and it's really very important to do 
This is how the administrative controls works 
Lets move into next topic 

The technical controls

    It's the firewall & antivirus software we are all using in our systems and in organisation they will use IDS and more.

The physical controls

   This is what the real world security controls which is the security guards protecting buildings actually it's really important in our current society and organisations use this to protect hardware and physical facilities.
This is what the three categories of controls now let's move to the next part which is five functions of controls

THE FIVE FUNCTIONS OF CONTROLS

 this is what the three security controls do and it have five functions, atleast a single function from this will be there in the three categories security controls. They are preventive, detective, corrective, deterrent, compensating. It's all just what we used to protect our houses let's see how it works with some real life examples.

Preventive

Preventive is securing something we have before any damage happens
And there is a saying " preventing is better than cure" that's what all security controls do. To get clear about this here is an example, we all all lock our doors before leaving our house because we don't know what will happen after we went so this is called preventive.

Detective

 We can figure out what it will do with the name of this function, we can take the CCTV cameras as an example for this because it will records everything like each and every second will be recorded, this is call as detective.

Corrective

    Corrective function will be come to use after a attack  happened like If there is an natural disaster occurs we all tend to fix the damage right so that's what the corrective function will do.

Deterrent

   Deterrent is nothing, it's actually like manipulating or make the attacker think a second second by using security cameras to make them think it's all control. This is how the deterrent works.

And last but not least compensating

   Actually compensating is using alternative controls when the we can't use the primary control system due to any issues.

So that's all I have learned today I tried my best to make you guys understand these topics and if I made any mistakes in this you may let me know in the comments.
Let's see in another interesting topics.

if you want to study with study material you can get through this site

                                THANK YOU

Comments

Post a Comment

Popular posts from this blog

Day 2: Understanding the CIA Triad, AAA

Image
HELLO FRIENDS!! WELCOME TO MY CYPHERLOG Today I studied the fundamentals of cybersecurity - the CIA Triad and AAA Framework. by journaling this in this blog I pushed myself to be stay productive  it's really motivating me!! Let me break down what I learned in simple terms.   At first I have started with CIA Triad and AAA Framework actually this the basic foundation of cybersecurity so we need to understand it well to master it, as you thing its not an complicating topics because I too thought that, its just an simple topic which we can easily connect with our daily life, so let me explain it clearly. THE CIA TRIAD    CIA Triad is nothing but a combined term of three words which is CONFIDENTIALITY, INTEGRITY AND AVAILABILITY and we can call it as an three pillars of cybersecurity so let see how it is more important in cyber. CONFIDENTIALITY  CONFIDENTIALITY is, if you are authorized to the system or data like we can take our mobile or laptop as an example you're ...
Read more

Cryptography Basics: Encryption Types & Hashing Explained

Image
 HELLO FRIENDS WELCOME TO MY CYPHER LOG         Today I came up with a topic which I wondered about what it will be from the first year of my studies in cybersecurity, The cryptography.  In this blog we are going to un-wrap this topic and learn more about it. LETS GET INTO THE TOPIC CRYPTOGRAPHY     You may think that it can be difficult to learn but actually there's nothing like that because I too thought like that about this, if you still think it's difficult I will explain it Like you want.    Cryptography is encrypting data from a readable plain text to unreadable cipher text format. Cryptography is like a knife It has both advantages and disadvantages. Its purpose varies based on who uses it, if you want to use it to protect data it can keep it secure, On the other hand if an attacker uses it he can create a massive bad impact like implement the attack the ransomware. THE TWO MAIN TYPES OF CRYPTOGRAPHY     As I have mentio...
Read more

Cyber Security Day 4: Understanding Layered Security & Defence in Depth

Image
HELLO FRIENDS!! WELCOME TO MY CYPHER LOG Successfully I have learned continuously for three days without any procrastination and I am just feeling proud of myself,  I hope you guys too learn continuously without any distractions. Ok let's see what I have learned today,    In the last blogs we have seen about security controls in this blog we are going to dive into depth of defence in cyber security and also there is an architecture called zero trust, let's see how it works. Defence in depth    Security controls are just a single safety measure to prevent an attack but defence in depth are not like that as we can understand with the name itself it's controlling structure which will protect the asset from an attack layer by layer. And it has five layers.  If a company hosts a website they won't just rely on a single layer of security like five layers of controls Layer 1 is an external firewall that will automatically block the IP address which looks suspiciou...
Read more