Managerial Control
- •
def
- •
a security control that exists because a manager decided it should, rather than for a technical or physical reason
- •
- •
identifying it
- •
look for the "a manager decided..." framing — e.g., requiring badge recertification every 12 months, or password changes every 90 days; there's no technical requirement forcing that specific interval, someone just chose it
- •
- •