C
Configuration management control is a family of controls that addresses both configuration management and change management. Change control practices prevent unauthorized changes. They include goals such as configuring systems for least functionality as a primary method of hardening systems. Incorrect Answers: A: The Personal security control is family of controls that includes aspects of personnel security. It includes personnel screening, termination, and transfer. B: Access control is the family of controls that helps an organization implement effective access control. They ensure that users have the rights and permissions they need to perform their jobs, and no more. It includes principles such as least privilege and separation of duties. D: Physical and environment protection control are the family that provides an extensive number of controls related to physical security.