To Protect information assets, organizations implement controls or defense mechanisms. (countermeasures) Controls are designed to protect all components of information systems (data, software, hardware and networks). draw a picture of countermeasures. Results should show physical, access and communications controls.