Security control types: Physical (fences, gates. locks) (alarms, fire extinguishers) Technical (firewalls, settings, antivirus) (logins, file access permissions) Procedural (incident processes) (training, security awareness) and Legal (laws) (policies and regulations)