Which of the following control types is AUP an example of?

An Acceptable Use Policy (AUP) is a prime example of a managerial control. Managerial controls are policies, procedures, and guidelines established by management to govern security practices within an organization. AUPs define how users can and cannot use organizational assets, systems, and networks, thereby managing user behavior and reducing security risks. Physical controls involve tangible measures like locks or fences. Technical controls are implemented through hardware or software, such as firewalls or encryption. Operational controls are the day-to-day activities performed to maintain security, like security awareness training or incident response. While an AUP might influence operational activities or be enforced by technical means, its core nature as a policy makes it a managerial control.