The security controls (i.e., safeguards or countermeasures) for an information system that primarily are implemented and executed by people (as opposed to systems).
Sources:
FIPS 200
under OPERATIONAL CONTROLS
The security controls (i.e., safeguards or countermeasures) for an information system that are primarily implemented and executed by people (as opposed to systems).
Sources:
NIST SP 800-137
from
FIPS 200
NIST SP 800-30 Rev. 1
from
FIPS 200
NIST SP 800-39
from
FIPS 200
NIST SP 800-82r3
from
FIPS 200
Safeguards or countermeasures for a system that primarily are implemented and executed by people (as opposed to systems).
Sources:
CNSSI 4009-2015
under operational controls