1. Can you please provide a clear definition for procedural security controls?

  2. Are operational and procedural security controls synonyms?


closed as too broad by Eric G, Xander, Adi, Steve, GdD Mar 21 '14 at 9:16

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    Have you tried a google search? Wiki has a nice overview ... Aside from that, I am not sure what you're asking for. – schroeder Mar 20 '14 at 18:32
  • Yes. Google will tell you that controls are technical, management and operational. – Mark C. Wallace Mar 20 '14 at 18:54
  • @schroeder Yes, I have tried googling prior to asking the question. Wiki has a few examples, not a definition. I'm asking for clear definition. – golem Mar 20 '14 at 19:00
  • @Mark C. Wallace: I know what technical, management and operational controls are. The question is about procedural security controls. – golem Mar 20 '14 at 19:01
  • 1
    I'm not sure that you will find anything more than that. It's a category - a distinction. Security controls that take the form of procedures, policies, and processes. As opposed to physical and technical controls. – schroeder Mar 20 '14 at 19:25

Procedural security controls are security controls that mitigate identified risks by way of policies, procedures or guidelines. As opposed to other controls, procedural controls rely on users to follow rules or performs certain steps that are not necessarily enforced by technical or physical means.

How about that for a definition? By no means official as there is no official definition as far as I know.

Procedural controls and operational controls are not synonyms in my opinion. Technical or physical controls can be operational as well. Organizational controls comes to mind as most similar.

Not the answer you're looking for? Browse other questions tagged or ask your own question.