Which of the following are included in Administrative Controls? Each correct answer represents a complete solution. Choose all that apply. Response:

Conducting security-awareness training is an administrative control that educates users on security best practices and policies.

Screening of personnel, including background checks, is an administrative control to ensure that individuals in sensitive roles are trustworthy.

Monitoring for intrusion is typically a technical control, as it involves using tools and systems to detect malicious activity, rather than a purely administrative procedure or policy.

Implementing change control procedures is an administrative control that establishes a formal process for managing changes to systems and configurations to prevent unauthorized modifications.

Developing policy is a fundamental administrative control that sets the rules and guidelines for how an organization manages its information security.