The seven main categories of access control are directive, deterrent, compensating, detective, corrective, and recovery.