Which of the following is an administrative security control?

• A. Encryption
• B. Network security
• C. Separation of duties
• D. Logical access controls

Answer: (C)

Administrative security controls are governance-based safeguards that shape how people and processes operate to protect assets. Separation of duties is a classic example: it distributes critical tasks among multiple people so no single individual can complete a sensitive action alone, reducing the risk of fraud or error. For instance, one person might initiate a financial transaction while another approves it, and yet another records it, with independent checks and audits in place. This policy-driven approach contrasts with technical controls like encryption (protects data confidentiality with cryptography), network security (defensive measures for the network itself), or logical access controls (permissions and authentication built into systems). Those are implemented as technical measures; separation of duties operates at the management and process level to enforce proper checks and balances.