Well the command is spctl, so I assume it stands for (s) Security (p) Policy (ctl) Control.

I agree that "ctl" for "control" is a bit weird but it's a pretty typical Unix convention: pfctl, networkctl, systemctl, etc.