ISC2 Exam ISSMP Topic 5 Question 11 Discussion

The following are examples of the administrative controls that involve all levels of employees within an organization and determine which users have access to what resources and information.

Training and awareness

Policy enforcement

Personnel registration and accounting

Disaster preparedness and recovery plans

Administrative controls can be security policies or items such as standards, guidelines, and procedures for individuals to follow to ensure security. Administrative controls are the foundations from which technical and physical controls are implemented.

Answer options C and E are incorrect. Network authentication and encryption are examples of technical controls.