Exam CISSP topic 1 question 342 discussion

There are three main types of IT security controls including technical, administrative, and physical. The primary goal for implementing a security control can be preventative, detective, corrective, compensatory, or act as a deterrent. Controls are also used to protect people as is the case with social engineering awareness training or policies. https://purplesec.us/security-controls/

The three MAIN categories of security controls refer to how the controls are implemented or applied in a system: Administrative Controls – Policies, procedures, training, and guidelines (e.g., security awareness training, hiring practices). Technical Controls – Also known as logical controls, these use technology to reduce risk (e.g., firewalls, encryption, access control lists). Physical Controls – Controls that prevent or deter physical access (e.g., locks, security guards, fences).

Administrative, technical, and administrative are types. The three categories are Preventive, Corrective, and Detective

answer is good. Simple knowledge question