Administrative facility security controls, Technical facility security controls , and Physical controls for facility security. A control, or countermeasure, is put into place to mitigate (reduce) the potential risk. Controls are put into place to reduce the risk an organization faces, and they come in three main flavors: administrative, technical, and physical. Administrative controls are commonly referred to as “soft controls” because they are more management-oriented. Technical controls (also called logical controls) are software or hardware components, as in firewalls, IDS, encryption, identification and authentication mechanisms. Physical controls are items put into place to protect facility, personnel, and resources. The different functionalities of security controls are preventive, detective, corrective, deterrent, recovery, and compensating.