Question 38

AUP is an example of a Managerial control type.

AUP, or Acceptable Use Policy, is a form of managerial control as it establishes guidelines for how organizational resources should be used by employees. This type of control focuses on management's role in overseeing and enforcing policies that govern behavior within an organization.

A) Physical

Physical controls refer to tangible measures that protect an organization's physical assets, such as locks, security guards, and surveillance systems. AUP does not fall under this category, as it does not involve the physical protection of assets but rather governs user behavior regarding those assets.

B) Managerial

Managerial controls are implemented to ensure that organizational policies are followed and that employees act in accordance with established guidelines. AUP fits this definition perfectly, as it is designed to manage and direct employee behavior concerning the use of technology and information systems.

C) Technical

Technical controls involve the use of technology to protect systems and data, such as firewalls, encryption, and intrusion detection systems. While AUP may inform the use of some technical controls, it is fundamentally about policy and oversight rather than the technical mechanisms themselves.

D) Operational

Operational controls are designed to manage day-to-day operations and ensure that processes are conducted efficiently and effectively. AUP does not directly address operational processes but instead focuses on the acceptable behaviors regarding resource use, making it a managerial rather than an operational control.

Conclusion

AUP is definitively categorized as a managerial control because it establishes and enforces policies that guide employee behavior in the use of organizational resources. The other options—physical, technical, and operational—do not accurately describe the nature of AUP, as they pertain to different aspects of organizational security and process management. Thus, option B is the clear and correct choice.