Discuss OCEG GRCA Exam Topic 2 Question 28

The two kinds of PROACTIVE controls are

Atraining and education

Bpromoting and preventive

Caccess and system

Suggested Answer: B

Proactive controls are those measures implemented to prevent undesirable events before they occur. Promoting controls are designed to encourage desired behaviors and outcomes, such as compliance with policies and procedures. Preventive controls are aimed at stopping undesirable events or actions before they happen, such as implementing security measures to prevent unauthorized access. Both types of controls are essential for effective risk management and ensuring the security and integrity of an organization's processes and systems. Reference:

COSO Internal Control -- Integrated Framework

ISO/IEC 27002:2013 - Information technology - Security techniques - Code of practice for information security controls

Get Premium GRCA Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Zana 2 months ago

C) access and system seems right too. Controls need to be in place.

Josephine 2 months ago

I lean towards B) promoting and preventive. It's about being ahead of problems.

Rodney 2 months ago

I think it's A) training and education. They really help prevent issues.

Pedro 2 months ago

Not sure about this, feels like there should be more options.

Louvenia 2 months ago

I agree with A, but what about C?

Cary 2 months ago

Wait, are there really only two kinds?

Dacia 3 months ago

I thought it was B) promoting and preventive!

Larue 3 months ago

A) training and education is definitely one type.

Ligia 3 months ago

I feel like training and education are definitely proactive, but I’m not confident about the other options.

Margurite 3 months ago

I practiced a similar question, and I think access and system controls might be more reactive than proactive.

Whitley 3 months ago

I remember something about promoting and preventive controls, but I can't recall the exact definitions.

Sherron 4 months ago

I think proactive controls are about preventing issues before they happen, but I'm not sure if it's training and education or something else.

OCEG GRCA Exam - Topic 2 Question 28 Discussion