What are information security controls?
These refer to controls encompassing processes, policies, devices, practices, or other actions implemented to protect information from unauthorised access, use, disclosure, disruption, modification, or destruction.