Controls I can explain
- Account lockout and password policies to manage authentication risk.
- File ACLs and EFS encryption to restrict access to information.
- Audit settings and Event Viewer to make activity reviewable.
- Windows Firewall, backup, and recovery settings as part of a broader control set.
The security perspective
A control can support more than one part of the CIA triad. The project connected settings with their purpose rather than treating configuration as an end in itself.
Scope and evidence
The report combines configured controls and documented concepts. Some controls were explained rather than demonstrated; the project did not establish that all 26 were tested through attack simulations.
Academic work in Windows virtual machines. The illustration highlights the access-control portion of a broader Windows security project.