Establishing a policy that mandates regular security awareness training for all employees is an example of an administrative control. Administrative controls consist of policies, procedures, and regulations that manage the human elements of security operations. They are crucial for ensuring that employees understand their roles and responsibilities regarding organizational security. Technical controls involve the use of technology to mitigate risks, while physical controls address the protection of physical assets. Operational controls, although related to procedures, are more about the day-to-day implementation of security measures rather than policy establishment.
Learn More
AI Generated Content may display inaccurate information, always double-check anything important.
What are examples of administrative controls?
How do administrative controls differ from technical controls?
What are some reasons for implementing regular security awareness training?