What is an Administrative Cybersecurity Control?

Administrative controls are the policies and procedures defined by an organization’s security policy and other regulations or requirements. These controls focus on personnel and business practices.

Examples: policies, procedures, hiring practices, background checks, employee training.