Reply To: OCU C)SP D Week 03 Lesson 07 Discussion
When it comes to securing a company’s network, layered controls are essential. I have seen in my career how combining technical, administrative, and physical safeguards creates a resilient defense. Technical controls like firewalls, intrusion prevention systems, and multi-factor authentication help block unauthorized access and detect threats in real-time. Encryption tools like BitLocker are especially valuable as they protect data at rest by securing entire drives, which is critical for laptops and mobile devices.
Administrative controls guide behavior – security policies, user training, and role-based access ensure that people understand their responsibilities and only access what they need. Implementing user access controls based on least privilege reduces risk and limits exposure should credentials be compromised.
Physical controls like locked server rooms and badge access prevent unauthorized entry to hardware. Together, these controls form a defense-in-depth strategy. No single measure is enough, but when layered intentionally, they reduce risk, anticipate failure, and support business continuity. That’s the kind of security posture organizations need to thrive.