Security controls which are the critical function of IT professionals and it usually covers operational, management actions, technical actions, etc., which are designed to detect mitigate or deny threats and malicious attacks to IT Network Systems. Security controls are meant to protect infrastructure resources where information or data at rest. Security controls which also addresses physical security, cyber security, to keep any external threat away from the organization that works security controls which also addresses physical security, cyber security, to prevent any external threat away from organization networks and resources. Protection includes but not limited to access control, CCTV, alarm detection, audits, network scanning, the continuous improvement of security and technology, security compliance policies and procedures