What type of controls are designed to discourage attacks?

Deterrent controls are specifically designed to discourage individuals from attempting unauthorized actions or attacks. These controls create an atmosphere of security that acts as a warning to potential attackers. For instance, visible security measures such as surveillance cameras, security signage, or increased security presence can deter would-be intruders from attempting to breach a system or facility, as the risks and consequences of being caught are made clear.

Deterrent controls are integral to a layered security strategy because they not only help prevent attacks but also work in conjunction with other types of security measures. While preventative controls aim to stop attacks before they occur, and detective controls focus on identifying and reporting incidents that have already happened, deterrent controls emphasize the psychological aspect of security, aiming to make the cost of an attack outweigh any potential gains for an attacker.

Corrective controls, on the other hand, are meant to restore systems and processes after an incident has occurred, further differentiating them from deterrent controls, which focus solely on preventing attacks from happening in the first place.