FixTheVuln

A: Deterrent — Deterrent controls discourage attacks (e.g., warning banners, security cameras). Preventive controls block attacks; detective controls identify them.

A: Hacktivist — Hacktivists are motivated by political or social ideology, often defacing websites or leaking data.

A: Zero trust — Zero trust verifies every access request regardless of network location — "never trust, always verify".

A: Security Information and Event Management — SIEM collects, correlates, and analyzes log data from multiple sources to detect security events.

A: A formal document defining an organizations security requirements — A security policy is a formal document that outlines security objectives, rules, and responsibilities.

A: Physical — Physical controls protect tangible assets. Security guards, locks, and fences are physical controls.

A: Administrative — Administrative controls are policies, procedures, and guidelines. Technical controls are implemented through technology.

A: Corrective — Corrective controls remediate after an incident (e.g., restoring from backup, patching a vulnerability).

A: Compensating control — Compensating controls provide an alternative when the primary control cannot be implemented.

A: Availability — Availability ensures systems and data are accessible to authorized users when needed.