What are preventive controls?
A preventive control, or preventative control, is a safeguard that is put in place with the intention of preventing a security incident. The purpose of taking preventative measures is to eliminate or reduce as much as possible the potential of a breach, which will inevitably lead to an impact on the organization and the business.
A preventive control makes an effort to thwart any unauthorized efforts to make a change or access a system. This helps preserve the confidentiality, integrity, and availability of IT assets. Hence, a blue team needs to deploy the appropriate level of controls and safeguards, per the risk assessment of each IT asset in its scope.
Moreover, any controls in the organization will need to be regularly monitored and updated to ensure they are running at optimal levels and that the changing needs of the business, the industry, and the threat landscape are taken into due consideration.
Benefits
As the name suggests, preventive...