Skip to main content
Welcome to Section 2 of the KodeKloud Security Plus Certification Exam Preparation Course. In this lesson, we delve into general security concepts that serve as the foundation for more advanced topics. In this section, you will learn how to:
  • Understand fundamental security concepts.
  • Explore the definition of security controls and differentiate between various types.
  • Review key security principles such as the Confidentiality, Integrity, and Availability (CIA) triad, Zero Trust, and physical security measures.
  • Examine the Change Management process in detail.

​
What Are Security Controls?

A security control is an action or countermeasure implemented to mitigate specific security threats. As cyberattacks become more complex, understanding these controls is crucial to safeguarding your systems. Below, we discuss examples to help illustrate how these controls function in practice.

​
Mitigating Malware and Computer Viruses

Malware and computer viruses are among the most common attack vectors. To protect against these threats, many organizations deploy anti-malware and anti-virus detection software.
The image shows a diagram titled "Security Controls" with icons and labels for "Malware," "Computer Viruses," "Anti-malware," and "Computer virus detection."
The diagram above clearly illustrates a security control designed to counteract attacks involving malware and computer viruses.

​
Protecting Against SQL Injection Attacks

Consider another scenario: running a SQL database as part of an application. SQL databases are particularly vulnerable to SQL injection attacks, during which hackers attempt to manipulate your database by injecting malicious SQL commands.
The image illustrates a concept of SQL injection attacks with a graphic of a database being "injected" by a syringe, accompanied by the text "SQL databases are susceptible to SQL injection attacks."
To defend against SQL injection:
  • Input Validation: Ensure all data received by your application is checked for potentially harmful input.
  • Code Reviews: Regularly perform thorough code reviews to identify and remediate vulnerabilities.
The image is a slide titled "Security Controls" with an icon of a webpage and a cursor, and it advises implementing input validation and code reviews to prevent SQL injection attacks.
Implementing robust input validation and comprehensive code reviews can significantly reduce the risk of SQL injection attacks.

​
The Defensive Role of Security Controls

While malicious attacks represent offensive tactics, security controls act as your organization’s defensive measures, preventing or mitigating these attacks.
The image illustrates the concept of security controls, depicting an archer as an offensive attacker and a shield-bearing figure as a defensive measure.
By understanding and implementing these security controls, you strengthen your system’s resilience against threats. For further reading on related topics, consider exploring: This comprehensive overview of security controls is an essential step in fortifying your mastery of cybersecurity fundamentals. Enjoy your learning journey in this course!

Watch Video