The security controls (i.e., safeguards or countermeasures) for an information system that focus on the management of risk and the management of information system security.
Sources:
FIPS 200
under MANAGEMENT CONTROLS
NIST SP 800-137
under Management Controls
from
FIPS 200
NIST SP 800-30 Rev. 1
under Management Controls
from
FIPS 200
NIST SP 800-39
under Management Controls
from
FIPS 200
Safeguards or countermeasures for an information system that focus on the management of risk and the management of system security. Note: Sometimes called "program management controls"; contrast with common controls, operational controls, and technical controls.
Sources:
CNSSI 4009-2022
from
FIPS 200 - adapted
Restricting who can manage the computer to a limited number of known people
Sources:
NISTIR 7682
under Management control