Which of the following is most concerned with personnel security?

A.
Management controls

B.
Operational controls

C.
Technical controls

D.
Human resources controls

Explanation:
On the CISSP exam you can see control categories broken down into administrative, technical, and physical
categories and the categories outlined by NIST, which are management, technical, and operational. You need
to be familiar with both ways of categorizing control types.
According to the NIST control categories, Personnel Security is an Operational control.
Incorrect Answers:
A: Personnel security is not a management control.
C: Personnel security is not a technical control.
D: Human resources controls are not a defined control category although there are human resource controls
listed in the administrative control category.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, p. 58