Establishing a policy that mandates regular security awareness training for all employees is an example of an administrative control. Administrative controls consist of policies, procedures, and regulations that manage the human elements of security operations. They are crucial for ensuring that employees understand their roles and responsibilities regarding organizational security. Technical controls involve the use of technology to mitigate risks, while physical controls address the protection of physical assets. Operational controls, although related to procedures, are more about the day-to-day implementation of security measures rather than policy establishment.