Technical controls (also known as logical controls) are security measures implemented through hardware, software, and technical processes to protect an organization’s data, systems, and networks.
Zero Trust
Zero Trust is a security framework that operates on the principle of “never trust, always verify” and it assumes that threats can exist both outside and inside the network, and thus, no user or device, whether inside or outside the organization’s network, should be trusted by default.
WAF – Web Application Firewall
A Web Application Firewall (WAF) is a security solution designed to protect web applications by filtering and monitoring traffic between a web application and the internet.
SASE – Secure Access Service Edge
Secure Access Service Edge (SASE) is a cloud-based architecture that combines network security and wide-area networking (WAN) into a single, unified service.
IAM – Identity and Access Management
Identity and Access Management (IAM) is a framework of policies, technologies, and processes used to manage and control access to an organization’s resources, systems, and data.
Honeypot
A Honeypot is a decoy system or network resource designed to attract cyber attackers and gather intelligence on their techniques, behaviors, and tools.
Digital Signatures
Digital signatures are cryptographic mechanisms used to authenticate the validity and integrity of digital messages, documents, or software.
CASB – Cloud Access Security Broker
A Cloud Security Access Broker (CASB) acts as an intermediary between an organization’s on-premises infrastructure and the cloud and provides a layer of security by enforcing enterprise security policies and ensuring compliance when users access cloud-based applications.
MFA – Multi Factor Authentication
Multi Factor Authentication (MFA) is a security mechanism that requires users to verify their identity using two or more independent factors before gaining access to a system, application, or data.
ETW – Event Tracing for Windows
Event Tracing for Windows (ETW) is a high-performance logging mechanism built into the Windows operating system that is leveraged as a security component to detect suspicious activity, such as unauthorized access attempts or malware behavior
