The security controls (i.e., safeguards or countermeasures) for an information system that primarily are implemented and executed by people (as opposed to systems). Response:

Operational Controls are security safeguards or countermeasures that are predominantly implemented and executed by human actions and processes within an organization. Examples include security awareness training, incident response procedures, and physical security measures like guard patrols, all of which rely on human involvement.

A Common Control is a security control inherited by multiple systems, not specifically one executed by people.

Visual controls are tools for visual management and communication, not a recognized category of security controls executed by people in IT security.

Embedded controls are integrated into system hardware or software and are typically automated, not primarily executed by people.