Employee training is an example of an administrative security control.

### Why this is right The lesson identifies training and policies as administrative controls. Training helps employees understand and follow the organization’s security procedures. ### The concept Administrative safeguards set expectations and practices for people and organizational processes. They complement technical controls such as firewalls and multifactor authentication. Training alone does not replace technical safeguards, but it can reduce human-related risks and help staff use other controls correctly. ### Terms - **Administrative control**: a policy, process, or people-focused safeguard that guides organizational behavior. ### Remember Policies and training are administrative, while firewalls and authentication tools are technical.