To ensure that all employees follow procedures regarding the integrity and confidentiality of personal identifiable information, a hospital required that policies and procedures be put in place for data access and that all data stored should be encrypted. This is an example of what type of controls?

ISACA CISM Exam syllabus in brief:

Information Security Governance    
A. Enterprise Governance
B. Information Security Strategy

Information Security Risk Management    
A. Information Security Risk Assessment
B. Information Security Risk Response

Information Security Program    
A. Information Security Program Development
B. Information Security Program Management

Incident Management    
A. Incident Management Readiness
B. Incident Management Operations