Control objective: A desired outcome or end result that is established to guide the design and implementation of controls. It is used in the development of a control framework to ensure that controls are aligned with the organization’s goals and objectives. For example, a control objective for an e-commerce website might be to ensure the confidentiality of customer data, or for a manufacturing company, it could be to prevent unauthorized access to production processes.
Categories: CC D1: Security Principles | CCSP D6: Legal - Risk and Compliance | CISM D1: Information Security governance | CISSP D1: Security and Risk Management | Security+ D5: Security Program Management and Oversight | SSCP D1: Security Concepts and Practices
« Back to Glossary Index