Question 41

AUP is an example of Managerial control type.

AUP, or Acceptable Use Policy, is classified as a managerial control because it establishes guidelines for the acceptable use of an organization's resources, thereby guiding employee behavior and decision-making.

A) Physical

Physical controls pertain to tangible measures that protect an organization's assets, such as locks, surveillance cameras, and security personnel. Since AUP is not related to physical security measures but rather focuses on user behavior, this option is incorrect.

B) Managerial

Managerial controls involve policies and procedures established to manage an organization’s operations and ensure compliance with regulations. AUP clearly falls under this category as it provides a framework for acceptable behavior regarding technology use within an organization.

C) Technical

Technical controls refer to hardware or software solutions that enforce security measures, such as firewalls, encryption, and access controls. While AUP may inform the implementation of technical controls, it does not itself function as a technical control, making this option incorrect.

D) Operational

Operational controls are day-to-day procedures and practices that ensure effective organizational operations, including standard operating procedures and training. Although AUP may influence operational procedures, it primarily serves a managerial role, thus rendering this option incorrect.

Conclusion

AUP is definitively categorized as a managerial control because it sets forth the guidelines that govern employee conduct regarding resource usage. Other options, such as physical, technical, and operational controls, do not encapsulate the essence of AUP, which revolves around policy and governance rather than direct operational or technical measures.