A company that has a mandatory vacation policy has implemented which of the following controls?

A.
Risk control

B.
Privacy control

C.
Technical control

D.
Physical control

Explanation:
Risk mitigation is done anytime you take steps to reduce risks. Thus mandatory vacation
implementation is done as a risk control measure because it is a step that is taken as risk
mitigation.