I disagree, this is definitely a management control. The IT team can't just set and forget the firewall, the managers need to review and approve any changes.
The regular review of a firewall ruleset seems like a procedural control to me. We need to ensure the firewall is configured properly and rules are up-to-date.
Daron
7 days agoGladys
16 days agoOra
18 days agoDwight
19 days agoMarget
22 days ago