SSCP: Systems Security Certified Practitioner

Management controls provide oversight and governance of an information-security program. Reviewing security controls evaluates whether the controls are appropriate and effective, making it a management-control activity.