Operations Security and Controls

Operations security and controls safeguard information assets while the data is resident in the computer

or otherwise directly associated with the computing environment. The controls address both software

and hardware as well as such processes as change control and problemmanagement. Physical controls are

not included and may be required in addition to operations controls.