Which type of control deals with the management of people's roles and responsibilities regarding security?

The choice that deals with the management of people's roles and responsibilities regarding security is management control. This type of control focuses on the policies, procedures, and practices that ensure an organization’s security objectives are achieved. Management controls are essential for establishing the overall framework for security governance within an organization. They encompass the development of security policies, risk management strategies, training and awareness programs, and compliance with regulations.

By clearly defining roles and responsibilities related to security, management controls help ensure that everyone within the organization understands their specific functions in maintaining security. This creates accountability and fosters a culture of security awareness among employees.

In contrast, technical controls typically involve tools and technologies designed to safeguard information systems (such as firewalls and encryption), operational controls focus on the day-to-day security procedures and processes within an organization (like incident response and access controls), and physical controls refer to physical measures taken to protect facilities and assets (like locks and surveillance systems). Each of these plays an important role in security, but they do not specifically address the management of people's roles and responsibilities.