Administrative controls are policies, procedures, and practices designed to influence the behavior of employees and manage operational risks within an organization. They serve as a fundamental layer of defense in risk management, complementing physical and technical controls to ensure a comprehensive security strategy.