some form of measure put in place to prevent some cybersecurity risks

They are tactics and/or strategy in place to proactively minimize cybersecurity risks

A controls efficacy can be measured by it’s:

  • functionallity
  • effectiveness
  • assurance
  • cost-to-benifit ratio