Controls related to the management of personnel, including training of employees, management reviews, and internal audits

Controls related to organizational structure, such as segregation of duties, job rotations, job descriptions, and approval processes

Controls related to the use of technical measures or technologies, such as firewalls, alarm systems, surveillance cameras, and IDSs