The security controls for an information system that focus on the management of risk and the management of information system security are known as: Response:

Operational controls are executed by people during the day-to-day operations of an information system, focusing on aspects like personnel security, physical security, and incident response.

Technical controls are implemented within the information system itself through hardware, software, or firmware to enforce security policies, such as authentication, encryption, and access control mechanisms.

Management controls are primarily concerned with the administrative aspects of information security, encompassing policies, procedures, guidelines, and governance activities established by management to manage risk and ensure the effective operation of the security program. These include areas like security planning, risk assessment, and security awareness training.

Logical controls are generally synonymous with technical controls, referring to software-based security measures implemented within an information system.