nerdexam
(ISC)2

CGRC · Question #521

Subsequent to a security breach, which of the following techniques are used with the intention to limit the extent of damage caused by the incident? Response:

The correct answer is A. Corrective controls. After a security breach, corrective controls are implemented to limit the damage, recover systems, and restore normal operations.

Selection and Approval of Framework, Security, and Privacy Controls

Question

Subsequent to a security breach, which of the following techniques are used with the intention to limit the extent of damage caused by the incident? Response:

Options

  • ACorrective controls
  • BSafeguards
  • CPreventive controls
  • DDetective controls

How the community answered

(44 responses)
  • A
    86% (38)
  • B
    7% (3)
  • C
    2% (1)
  • D
    5% (2)

Why each option

After a security breach, corrective controls are implemented to limit the damage, recover systems, and restore normal operations.

ACorrective controlsCorrect

Corrective controls are designed to minimize the impact of an incident, correct errors or omissions, and restore the system or process to its desired state after a security breach has occurred. These controls are reactive, focusing on damage control and recovery.

BSafeguards

Safeguards is a broad term that encompasses all types of controls (preventive, detective, corrective) and is not specific to post-breach damage limitation.

CPreventive controls

Preventive controls are put in place to stop security incidents from happening in the first place, operating before a breach occurs.

DDetective controls

Detective controls are designed to identify and alert about security incidents after they have occurred but before significant damage is done, focusing on detection rather than damage limitation or recovery.

Concept tested: Types of Security Controls - Corrective

Source: https://csrc.nist.gov/glossary/term/corrective_control

Topics

#Security controls#Corrective controls#Incident response#Damage limitation

Community Discussion

No community discussion yet for this question.

Full CGRC Practice