None
A countermeasure that includes controls that are executed by people, e.g., physical environment protection, configuration management, and incident response.
Source(s):
NIST SP 800-127
[Withdrawn]