Cybersecurity controls are the measures (including policies, procedures, and technologies) that a company puts in place to protect its digital assets from threats. They are considered “basic” or “foundational” because they represent the essential first steps every organization should take to build a strong security posture.