management controls

{
  "id": "MLC-T-CYB-002593",
  "term": "management controls",
  "field": "Cybersecurity",
  "definition": "1. The security controls (i.e., safeguards or countermeasures) for an information system that focus on the management of risk and the management of information system security.\n\n2. Safeguards or countermeasures for an information system that focus on the management of risk and the management of system security. Note: Sometimes called \"program management controls\"; contrast with common controls, operational controls, and technical controls.\n\n3. Restricting who can manage the computer to a limited number of known people",
  "references": [
    "FIPS 200; NIST SP 800-137 from FIPS 200; NIST SP 800-30 Rev. 1 from FIPS 200; NIST SP 800-39 from FIPS 200",
    "CNSSI 4009-2022 from FIPS 200 (adapted)",
    "NISTIR 7682",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/management-controls/"
}