To help review or design security controls, they can be classified by several criteria . One of these
criteria is based on their nature. According to this criterion, which of the following controls consists
of incident response processes, management oversight, security awareness, and training?

A.
Compliance control

B.
Physical control

C.
Procedural control

D.
Technical control

Explanation:
Procedural controls include incident response processes, management oversight,
legal and regulatory, or compliance controls, include privacy laws, policies, and clauses.