Introduction to cybersecurity controls

- [Instructor] The term cybersecurity … means to protect things in cyberspace from attack. … And we do this by using security controls … that are fit for purpose and demonstrably effective. … Controls also need to not inhibit the organization's ability … to carry out its business. … And they need to be cost effective. … Consequently, they generally don't provide … complete mitigation. … And there'll usually be … an acceptably small level of risk remaining, … which is known as the residual risk. … We can show this concept as follows: … threats, vulnerabilities and impact … together form what is known as the inherent risk. … When controls are implemented, … what we have left is the residual risk. … Controls can mitigate risk in different ways. … By deterring attack. … By preventing attack. … By detecting attack. … And by correcting or remediating … the damage caused by an attack. … It's important when designing a control strategy … to combine controls in order to provide defense in depth. …