Which of the following best defines managerial controls?

The correct answer is A. Controls related to the management of personnel, including training of employees, management. Managerial controls (also called administrative controls) include policies, procedures, and processes to ensure effective security governance. These controls include training, internal audits, security awareness programs, and management reviews. These align with ISO/IEC…

Information Security Controls

Question

Options

AControls related to the management of personnel, including training of employees, management
BControls related to organizational structure, such as segregation of duties, job rotations, job
CControls related to the use of technical measures or technologies, such as firewalls, alarm

How the community answered

(51 responses)

A
86% (44)
B
10% (5)
C
4% (2)

Explanation

Managerial controls (also called administrative controls) include policies, procedures, and processes to ensure effective security governance. These controls include training, internal audits, security awareness programs, and management reviews. These align with ISO/IEC 27001:2022 Annex A Control A.5.2 (Information Security Roles and Responsibilities) and A.5.3 (Segregation of Duties).

Topics

#managerial controls#control types#personnel management#administrative controls

Community Discussion

No community discussion yet for this question.

Full ISO-IEC-27001-LEAD-AUDITOR Practice