Managerial controls, such as security policies and risk management, provide the framework and guidelines for implementing technical controls. Technical controls, like firewalls and encryption, are the tools used to enforce the policies and procedures established by managerial controls. Managerial controls do not replace the need for technical controls, but rather work in conjunction with them to create a comprehensive security strategy. While managerial controls can help prevent incidents, they are not solely responsible for incident prevention, as that requires a combination of various control types.