[Verse 1] Twenty controls scattered on your desk tonight Administrative rules and technical might Physical barriers guard the front door Detective sensors watch for something more Sort them by function, sort them by design Preventive, corrective, recovery's fine [Chorus] P-D-C-C-D-R, remember the six Prevention Detection Correction that sticks Compensating Deterrent Recovery too Administrative Technical Physical crew Map every control, find the missing piece Your security puzzle finds its release [Verse 2] Badge readers blocking unauthorized entry Firewalls filtering packets by the plenty Background checks before the hire Audit logs when systems perspire Administrative policies set the tone Technical controls guard silicon and bone [Chorus] P-D-C-C-D-R, remember the six Prevention Detection Correction that sticks Compensating Deterrent Recovery too Administrative Technical Physical crew Map every control, find the missing piece Your security puzzle finds its release [Bridge] Preventive stops before it starts Detective catches criminal arts Corrective fixes what went wrong Compensating keeps you strong Deterrent makes them think twice Recovery rolls the loaded dice [Verse 3] Matrix columns show the empty squares Administrative gaps expose your cares Missing physical controls at sector nine Technical holes in the defensive line Twenty controls classified complete But eighteen more make security sweet [Chorus] P-D-C-C-D-R, remember the six Prevention Detection Correction that sticks Compensating Deterrent Recovery too Administrative Technical Physical crew Map every control, find the missing piece Your security puzzle finds its release [Outro] Classification reveals what isn't there Empty cells demand your careful care Function meets nature in the grid Showing threats you never hid
← 4 Template Control Statement Patterns | Exercise 2: Policy-to-Control Traceability →