Answer:
Administrative controls.
Step-by-step explanation:
Administrative controls can be defined as those controls which cite the policies, procedures, and guidelines for the employees. These controls serves as a guide for the employees on how they should handle sensitive informations of an organization.
These controls define an organization's security goals to it's employees or personnel. It is also known as 'procedural controls.' The administrative controls can also define the usage of organization's internet or equipments, etc.
The 'Security Awareness Training Program' falls under the rubric of the Administrative controls. Thus the last option (D) is correct.