Managerial controls are the correct answer because they involve establishing security policies, procedures, and guidelines to manage security risks. These controls are implemented at the management level and provide the framework for the overall security strategy. Technical controls, on the other hand, involve implementing and managing security technologies like firewalls and encryption. Operational controls focus on day-to-day operations and tasks, such as incident response and access controls. Physical controls protect physical assets and premises, such as using biometrics and surveillance.