Some Notes on Types of Security Controls & the Way they’re Implemented in Enterprise Environments