A strong control uses multiple layers — combining administrative, physical, and technical methods across detective, corrective, and preventive categories. This layered approach, known as depth of control, ideally spans all nine control layers. Relying on a single control type represents a weak control posture.