There are five main categories of security controls: administrative, technical, physical, detective, and preventive. Administrative controls involve policies and procedures, technical controls use technology to protect systems, physical controls safeguard physical assets, detective controls identify security incidents, and preventive controls proactively mitigate risks.