**Technical controls** consist of solutions such as firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), antivirus (AV) products, encryption, etc. Technical controls can be used in a number of ways to meet organisational goals and objectives. They also *enforce confidentiality, integrity, and availability in the digital space*. Examples of technical controls: | **Control Name** | **Control Type** | **Control Purpose** | | :--- | :--: | :--: | | Firewall | Preventative | To filter unwanted or malicious traffic from entering the network | | IDS/IPS | Detective | To detect and prevent anomalous traffic that matches a signature or rule | | Encryption | Deterrent | Provide confidentiality to sensitive information | | Backups | Corrective | Restore/recover from an event | | Password management | Preventative | Reduce password fatigue | | Antivirus (AV) software | Corrective / Detective | Detect and quarantine known threats | | Manual monitoring,<br>maintenance, and<br>intervention | Preventative | Necessary to identify and manage threats, risks, or vulnerabilities to <br>out-of-date systems |