Comprehensive and Detailed 250–300 Words Explanation From Exact Extract from Chief Information Security Officer (CCISO) Documents:

The EC-Council CCISO Body of Knowledge defines security controls as the primary countermeasures used to minimize or manage risk. Security controls include administrative, technical, and physical safeguards implemented to reduce the likelihood or impact of threats.

CCISO documentation explains that controls are selected based on risk assessments and aligned with organizational risk tolerance. Examples include access controls, encryption, monitoring systems, policies, and procedures.

Security operations execute controls, audits assess their effectiveness, and guidelines provide recommendations—but controls themselves are the countermeasures.

Therefore, the correct answer is Security controls.