Which category focuses on administrative controls such as policies and procedures?

• A. Physical safeguards
• B. Technical safeguards
• C. Administrative safeguards
• D. Operational safeguards

Answer: (C)

Administrative safeguards govern security through policies, procedures, and governance activities that ensure people, processes, and technology work together. They cover how an organization conducts risk assessments, enforces access policies, trains the workforce, and plans for incident response and continuity. This focus on policies and procedures is what distinguishes administrative safeguards from the other categories, which address physical protections (protecting the facilities and equipment) and technical protections (the actual technical controls like encryption and access controls). The term operational safeguards isn’t the standard way to name this category, so the administrative option best fits the description.