Watch this video on YouTube
What is the primary purpose of administrative controls in a security framework?