SSCP - Security Concepts and Practices - Preventative controls