Controls for Information Security Essay Example | Topics and Well Written Essays - 500 words

Controls for Information Security - Essay Example The combination of preventive, detective and corrective controls are suitable for the security of an organization’s information system because the multiple control layers work together to avoid a single point of failure. The detective controls comprise of log analysis, intrusion detection systems and constant monitoring of the system (Romney, et al, 2012). Similarly, the preventive mechanism identifies the probability of an attack and initiates control measures, such as IT solutions, physical security or change of controls and management. The preventive control functions towards identifying and blocking the malicious risk. It involves the observation of safe computing practices that hinder unwarranted access by others. After the prevention measures, the corrective controls ensure that the affected data can be restored to usefulness. Considering this, the combination or the detective, preventive and corrective controls work through the entire systems by recognizing threats both internally and externally. Controls must always be in place in an organizational system since they protect the deletion, copying or transfer of data. This implies that controls also serve as data security that may reach the hands of unauthorized parties. It is essential to install all the control strategies that function together towards achieving the organizational performance (Romney, et al, 2012). This is because it is easy to thwart fraud cases that might involve the fabrication of data to suit the cybercriminals.