CGRC · Question #521
Subsequent to a security breach, which of the following techniques are used with the intention to limit the extent of damage caused by the incident? Response:
The correct answer is A. Corrective controls. After a security breach, corrective controls are implemented to limit the damage, recover systems, and restore normal operations.
Question
Subsequent to a security breach, which of the following techniques are used with the intention to limit the extent of damage caused by the incident? Response:
Options
- ACorrective controls
- BSafeguards
- CPreventive controls
- DDetective controls
How the community answered
(44 responses)- A86% (38)
- B7% (3)
- C2% (1)
- D5% (2)
Why each option
After a security breach, corrective controls are implemented to limit the damage, recover systems, and restore normal operations.
Corrective controls are designed to minimize the impact of an incident, correct errors or omissions, and restore the system or process to its desired state after a security breach has occurred. These controls are reactive, focusing on damage control and recovery.
Safeguards is a broad term that encompasses all types of controls (preventive, detective, corrective) and is not specific to post-breach damage limitation.
Preventive controls are put in place to stop security incidents from happening in the first place, operating before a breach occurs.
Detective controls are designed to identify and alert about security incidents after they have occurred but before significant damage is done, focusing on detection rather than damage limitation or recovery.
Concept tested: Types of Security Controls - Corrective
Source: https://csrc.nist.gov/glossary/term/corrective_control
Topics
Community Discussion
No community discussion yet for this question.