CompTIA CySA+ CS0-003 Practice Question

Managerial controls relate to the policies and procedures that establish the organization's security management structure and the guiding principles for security practices. In this scenario, focusing on providing cybersecurity training to employees to reduce human error through improved understanding of security protocols is best aligned with implementing a managerial control. Technical controls are more related to hardware or software mechanisms that enforce security policies (e.g., firewalls, intrusion detection systems). Operational controls involve the day-to-day execution and implementation of security procedures (e.g., incident response processes), whereas preventative controls aim to avoid security incidents from occurring altogether (e.g., use of strong authentication mechanisms).