Which type of security control acts after an incident to eliminate or minimize its impact?

Which type of security control acts after an incident to eliminate or minimize its impact?

• A. Preventive
• B. Deterrent
• C. Corrective
• D. Directive

Answer: (C)

Corrective controls are designed to act after an incident to restore normal operations and reduce its impact. They focus on repairing systems, recovering data, changing configurations or processes, and strengthening defenses to prevent recurrence. This makes them the best fit for minimizing damage once an incident has occurred. Preventive controls aim to stop incidents from happening in the first place, deterrents discourage wrongdoing, and directives guide actions through policy and procedures rather than directly reducing impact after an event.

Corrective controls are designed to act after an incident to restore normal operations and reduce its impact. They focus on repairing systems, recovering data, changing configurations or processes, and strengthening defenses to prevent recurrence. This makes them the best fit for minimizing damage once an incident has occurred. Preventive controls aim to stop incidents from happening in the first place, deterrents discourage wrongdoing, and directives guide actions through policy and procedures rather than directly reducing impact after an event.