Management controls are some of the techniques and mechanisms that can be put in place to implement security policies – which ensure information and information systems are protected. These controls are not only used by managers but can be exercised by selected users.
These controls must be put in place to cover all forms of information security, physical security and classification of those information.
