[Verse 1] Twenty controls on your desk today Time to sort them the proper way First by function, then by nature Classification is your teacher Preventive stops before it starts Detective finds the broken parts Corrective fixes what went wrong Recovery helps you carry on [Chorus] P-D-C-C-D-R, functions clear as day Administrative, technical, physical way Sort them out, find the gaps Map your controls, fill the traps Classification sets you free Management security [Verse 2] Compensating when primary fails Deterrent tells a warning tale Administrative policies and rules Technical systems are your tools Physical barriers lock the door Each control serves something more Matrix helps you see the holes Where protection loses control [Chorus] P-D-C-C-D-R, functions clear as day Administrative, technical, physical way Sort them out, find the gaps Map your controls, fill the traps Classification sets you free Management security [Bridge] Firewall prevents intrusion Camera detects confusion Backup plan for restoration Training stops the violation Badge access at the gate Logging shows you what's too late Every control has its place In your organizational space [Verse 3] Look across your matrix grid See where coverage might be hid Empty boxes spell out risk Time to add them to your list Balance function with the form Keep your enterprise from harm Classification exercise Opens up your oversight eyes [Chorus] P-D-C-C-D-R, functions clear as day Administrative, technical, physical way Sort them out, find the gaps Map your controls, fill the traps Classification sets you free Management security [Outro] Twenty controls now organized Gaps identified and categorized Your control framework standing strong Classification keeps you moving along
← 4 Template Control Statement Patterns | Exercise 2: Policy-to-Control Traceability →