We have controls to protect data, such as access control and encryption; to protect the computers in our environment, including anti-virus and software patching; and to protect our ‘perimeter’ where our networks connect to other networks, like those of our business partners and the Internet.