Managerial Controls for Network Security