To comply with laws, regulations, and standards, companies implement risk-based controls that protect data’s confidentiality, integrity, and availability. Different controls serve different purposes, such as preventing, detecting, or deterring cyberincidents.