week 2

K1.2 The role and types of detective business control techniques in protecting the digital security of an organisation:

 

The Role of Detective Controls

Detective controls are security measures that aim to identify and alert an organisation to suspicious or harmful activity.
They can spot an incident:

• During the event (in progress)

• After the event has happened (retrospectively)

These controls don’t stop the incident from occurring – instead, they help organisations:

• Detect breaches

• Respond appropriately

• Gather evidence for investigation

• Improve future prevention

Types of Detective Control Techniques

Detective controls can be physical or administrative in nature.

Physical Detective Controls

These help identify unauthorised physical access or unusual movement in secured spaces.

These tools are especially important for data centres, server rooms, or any area storing critical digital infrastructure.

Administrative (Policies and Procedures)

These are human- or system-based logs and checks designed to detect abnormal activity.

Spot the Detective Controls
Scenario:
Your school is upgrading its IT security. The IT manager wants to install detective controls to help monitor and investigate incidents.

Task:
Identify three detective controls the school could use (at least one physical, one administrative).
For each, explain:
           How it works
           Why it's useful
           What it detects

Example (start):
                       Control: CCTV in the server room
                       What it detects: Unauthorised access
                       How it works: Video surveillance records people entering
                       Why it’s useful: Provides evidence if a breach occurs

Presentation Format: Paragraphs, posters, Canva Presentation or slides.

Last Updated
2025-07-11 13:02:56