Which type of control utilizes policies, DPRs, and BCPs?

The correct choice focuses on managerial controls, which are essential in the realm of information security management. Managerial controls are designed to help organizations establish policies, deliberate risk management strategies (such as disaster recovery plans, or DPRs), and maintain business continuity plans (BCPs).

These elements are crucial for providing a framework that allows an organization to ensure that security practices are consistent with its strategic goals. Policies set the tone and provide guidelines for security behavior, while DPRs and BCPs lay down the operational prerequisites needed to respond to incidents and maintain essential business functions during unforeseen events.

In contrast, operational controls are more hands-on and deal with the day-to-day operational activities that directly manage and protect information assets. Preventative controls are proactive measures designed to reduce the likelihood of incidents. Technical controls focus on the use of technology to enforce security measures and protect systems. While all of these types of controls are important in a comprehensive security strategy, the specific use of policies, DPRs, and BCPs clearly aligns with the scope and purpose of managerial controls.