The implementation of appropriate security controls for an information system is an important task that can have major implications for the operations and assets of an organization. Security controls are the management, operational, and technical safeguards or countermeasures prescribed for an information system to protect the confidentiality, integrity, and availability of the system and its i…