Administrative/Technical /Physical control

_{knowledge area: 1.Security and Risk Management - Types of Security Controls（控制類型）;Administrative (Management) Controls 管理性控制;Security Governance and Policy}

Administrative control 行政控制

_{Administrative controls are management-driven policies, procedures, and practices that influence the behavior and actions of personnel within an organization.}

行政控制是由管理階層制定的政策、流程與實務作業準則，用來規範人員的行為。可以降低人為風險、落實資安政策。 

Background checks for new employees

背景調查: 管理性措施，如: 政策、流程、訓練與人事措施，背景調查正是行政控制之一。

Technical control  技術控制

Password complexity requirements in system configuration. 密碼設定是技術控制 ,生物辨識為實體加技術控制

Physical control 實體控制

Security guard at the front entrance 保全人員屬於實體（physical）控制,生物辨識為實體加技術控制