A control is something you follow as a company, so that you mitigate a potential risk. In TrustCloud, control is the foundational building block of a company’s program.
For example, at TrustCloud, we have the following control:
Workstation OS:The company monitors the IT infrastructure devices for compliance with the Asset Management Policy and checks for requirements such as hard drive encryption, user authentication requirements, and security patching.
We follow this control by requiring each TrustCloud employee to keep their laptops up-to-date using Kolide. We have this control to mitigate the risk of an outdated employee laptop having a vulnerability that can be exploited to leak company-sensitive data.
