Critical Security Controls The SANS Critical Security Controls can be used to prioritize your security policies.