Tidal Control incident
Controls: what are they and how do you use them?
Resolved on July 24, 2026.
A control is a concrete action, configuration, procedure or agreement an organisation puts in place to manage a risk or meet a framework requirement. Controls fall into three types (technical, organisational, physical) and three functions (preventive, detective, corrective). Under ISO 27001, you select controls based on a risk assessment and document your choices in a Statement of Applicability. Common failures include controls that exist only on paper, missing ownership and implementing controls without first identifying the underlying risks.
Update timeline
- resolved Jul 24, 2026, 09:35 AM UTC
A control is a concrete action, configuration, procedure or agreement an organisation puts in place to manage a risk or meet a framework requirement. Controls fall into three types (technical, organisational, physical) and three functions (preventive, detective, corrective). Under ISO 27001, you select controls based on a risk assessment and document your choices in a Statement of Applicability. Common failures include controls that exist only on paper, missing ownership and implementing controls without first identifying the underlying risks.
Your product runs on more than Tidal Control
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services