MENU
To help review or design security controls, they can be classified by several criteria. One of these criteria is based on time. According to this criteria, which of the following controls are intended to prevent an incident from occurring?
Preventive controls are the security controls that are intended to prevent an incident from occurring, e.g., by locking out unauthorized
intruders.
Answer C is incorrect. Detective controls are intended to identify and characterize an incident in progress, e.g., by sounding the
intruder alarm and alerting the security guards or police.
Answer A is incorrect. Corrective controls are intended to limit the extent of any damage caused by the incident, e.g., by recovering the
organization to normal working status as efficiently as possible.
Answer B is incorrect. There is no such categorization of controls based on time.