To help review or design security controls, they can be classified by several criteria. One of these criteria is based on nature. According to this criteria, which of the following controls consists o

Technical controls use technology to enforce security, such as firewalls, encryption, and authentication systems, not processes or training programs.

Physical controls use tangible measures such as locks, fences, guards, and surveillance cameras to protect physical assets and facilities.

Procedural controls govern how people and processes operate within an organization. Incident response processes, management oversight, security awareness programs, and training all define human behavior and organizational workflows rather than relying on technology or physical barriers, which is what classifies them as procedural controls.

Compliance control is not a standard category under the nature-based classification of security controls in mainstream security frameworks.